Governance, Risk, and Compliance Manager - Columbia

State-of-South-Carolina; South Carolina; On-site; USD 70,000 - 110,000; Full time

Job summary

The State of South Carolina, Department of Employment and Workforce (DEW) seeks a Governance, Risk and Compliance (GRC) Manager to lead cybersecurity governance, risk and compliance efforts in a government setting. You will partner with the CISO to develop policies, perform security assessments, controls implementation and incident response planning.

Ideal candidates hold a bachelor’s degree in IT or CS with security-focused experience; CRISC/CISA are preferred.

Qualifications

• Bachelor's degree in information technology systems, computer science, or a related field.
• Experience in a security-focused role in information technology.
• Relevant experience may substitute for the degree on a year-for-year basis.

Responsibilities

• Develop and implement security policies, standards, and procedures to protect agency assets and data.
• Participate in audits and assessments, providing risk mitigation recommendations.
• Conduct security impact assessments for configuration changes and document findings.
• Assist in remediation planning for external audit findings.
• Ensure applications, hardware, infrastructure, and access controls meet best practices.
• Provide security administration for various operating systems and software.
• Use analytical and problem‑solving skills.
• Understand information risks and security controls.
• Write detailed technical documentation on security policies and procedures.
• Communicate effectively with technical and non‑technical audiences.
• Understand project management methodologies.

Skills

Governance

Risk management

Compliance

Cybersecurity

Incident response

Audits

Security controls

Documentation

Education

Bachelor's degree in information technology systems, computer science, or related field

Job description

About Us

Business is booming in South Carolina! Are you ready to be a part of developing and connecting the next generation of workers in this state? Year after year, experts pick our state as one of the best in the country for doing business. Just last year, South Carolina announced more than 8,000 new jobs and $9.12 billion in capital investment. Entrepreneurs are flocking to cities like Greenville, Charleston, Columbia, and Rock Hill to start and grow their businesses. And our hospitality industry is primed to take off as travelers from around the world continue to discover the beauty and accessibility of South Carolina’s mountains and coast.

Here at the South Carolina Department of Employment and Workforce (DEW), we are laser-focused on connecting every jobseeker who comes through our doors with their next great career opportunity! Are you looking for a meaningful position at an agency brimming with optimism and camaraderie that also offers job security, affordable health insurance, great retirement benefits, and work-life balance? If so, continue reading to discover your chance to make a difference at DEW!

Job Description

Are you a cybersecurity expert interested in using your skills to ensure information security in a government agency?

Our Governance, Risk and Compliance (GRC) Manager will be a key player in DEW’s cybersecurity efforts. Partnering with the Chief Information Security Officer (CISO), the GRC Manager will help develop and implement cybersecurity strategies, policies, and procedures. This includes conducting security assessments, implementing security controls, and assisting with incident response and recovery efforts. The ideal candidate will have strong decision‑making skills, team collaboration abilities, and efficient time management.

Key Responsibilities

• Develop and implement security policies, standards, and procedures to protect agency assets and sensitive data.
• Participate in audits and assessments of internal and external systems, providing recommendations for risk mitigation.
• Conduct security impact assessments for configuration changes and document findings.
• Assist in planning and coordinating remediation steps for external audit findings.
• Ensure applications, hardware, infrastructure, and access controls meet cybersecurity best practices and industry standards.
• Provide security administration for various operating systems and software.
• Utilize analytical and problem‑solving skills.
• Understand information risks and security controls.
• Write detailed technical documentation on security policies and procedures.
• Effectively communicate with technical and non‑technical audiences.
• Understand project management methodologies.

Education and Experience

A bachelor's degree in information technology systems, computer science, or a related field and experience in the information technology field to include experience in a security‑focused role. Relevant experience may be substituted for the bachelor's degree on a year‑for‑year basis.

Additional Requirements

Position may require employee to work evenings and weekends. Required certification(s) up-to-date. Other duties as required.

• Certified in Risk and Information Systems Control (CRISC) (preferred)
• Certified Information Systems Auditor (CISA) (preferred)