Governance, Risk, and Compliance Manager - Columbia

Doc PersonalBeratung GmbH; Columbia (SC); Sur place; USD 85 000 - 120 000; Plein temps

Résumé du poste

South Carolina Department of Employment and Workforce (DEW) is seeking a cybersecurity professional to join its Governance, Risk and Compliance (GRC) team as a manager. The role focuses on developing and implementing security strategies, policies, and procedures to protect state assets and data.

You will partner with the Chief Information Security Officer (CISO) to conduct security assessments, implement controls, and assist with incident response and recovery efforts.

Qualifications

• Bachelor's degree in information technology systems, computer science, or related field.
• Experience in a security-focused role; substitution allowed on a year-for-year basis.

Responsabilités

• Develop and implement security policies, standards, and procedures to protect agency assets and sensitive data.
• Participate in audits and assessments of internal and external systems, providing recommendations for risk mitigation.
• Conduct security impact assessments for configuration changes and document findings.
• Assist in planning and coordinating remediation steps for external audit findings.
• Ensure applications, hardware, infrastructure, and access controls meet cybersecurity best practices and industry standards.
• Provide security administration for various operating systems and software.
• Write detailed technical documentation on security policies and procedures.
• Communicate with technical and non-technical audiences.
• Understand project management methodologies.

Connaissances

Security policies

Audits & risk assessment

Incident response

Security administration

Communication

Formation

Bachelor's degree in information technology systems or computer science

Description du poste

About Us

Business is booming in South Carolina! Are you ready to be a part of developing and connecting the next generation of workers in this state? Year after year, experts pick our state as one of the best in the country for doing business. Just last year, South Carolina announced more than 8,000 new jobs and $9.12 billion in capital investment. Entrepreneurs are flocking to cities like Greenville, Charleston, Columbia, and Rock Hill to start and grow their businesses. And our hospitality industry is primed to take off as travelers from around the world continue to discover the beauty and accessibility of South Carolina’s mountains and coast. Here at the South Carolina Department of Employment and Workforce (DEW), we are laser-focused on connecting every jobseeker who comes through our doors with their next great career opportunity! Are you looking for a meaningful position at an agency brimming with optimism and camaraderie that also offers job security, affordable health insurance, great retirement benefits, and work-life balance? If so, continue reading to discover your chance to make a difference at DEW!

Job Description

Are you a cybersecurity expert interested in using your skills to ensure information security in a government agency?

Our Governance, Risk and Compliance (GRC) Manager will be a key player in DEW’s cybersecurity efforts. Partnering with the Chief Information Security Officer (CISO), the GRC Manager will help develop and implement cybersecurity strategies, policies, and procedures. This includes conducting security assessments, implementing security controls, and assisting with incident response and recovery efforts. The ideal candidate will have strong decision-making skills, team collaboration abilities, and efficient time management.

Key Responsibilities

• Develop and implement security policies, standards, and procedures to protect agency assets and sensitive data.
• Participate in audits and assessments of internal and external systems, providing recommendations for risk mitigation.
• Conduct security impact assessments for configuration changes and document findings.
• Assist in planning and coordinating remediation steps for external audit findings.
• Ensure applications, hardware, infrastructure, and access controls meet cybersecurity best practices and industry standards.
• Provide security administration for various operating systems and software.
• Utilize analytical and problem-solving skills.
• Understand information risks and security controls.
• Write detailed technical documentation on security policies and procedures.
• Effectively communicate with technical and non-technical audiences.
• Understand project management methodologies.

Are you ready to take on this challenge and help support South Carolina’s workforce system?

Education and Experience

A bachelor's degree in information technology systems, computer science, or a related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.

Additional Requirements

Position may require employee to work evenings and weekends. Required certification(s) up-to-date. Other duties as required.

Preferred Certifications

• Certified in Risk and Information Systems Control (CRISC) (preferred)
• Certified Information Systems Auditor (CISA) (preferred)

Supplemental questions are considered part of your official application. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position.