GRC & Information Security Manager - Policy & Risk

State of South Carolina; Columbia (SC); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Health, Dental, Vision

Life Insurance

Paid holidays

Job summary

South Carolina Law Enforcement Division (SLED) is seeking a results-driven information security professional to manage regulatory compliance and risk across the agency. You will support the information security program, enforce security requirements, and coordinate risk controls with state stakeholders.

The role emphasizes collaboration, strong communication, and the ability to translate complex security concepts to non-technical audiences statewide. Travel statewide is required.

Qualifications

• Requires a bachelor's degree in a related field.
• Experience in governance, risk, and compliance (GRC) programs.
• Knowledge of cyber security frameworks and security devices.
• Excellent communication, interpersonal, and leadership skills.
• Ability to liaison across technical and non-technical audiences statewide.

Responsibilities

• Plan, organize, and monitor regulatory enforcement activities for compliance with laws and standards.
• Support risk assessments, gap analyses, and business impact analysis.
• Assist with establishment and maintenance of the agency's information security program.
• Develop and deliver security awareness programs for staff.
• Monitor and report on effectiveness of security controls and compliance efforts.

Skills

Security governance

Communication skills

Leadership

GRC knowledge

Stakeholder liaison

Travel willingness

Education

Bachelor's degree in a related field

Tools

CJIS compliance tools

Job description

South Carolina Law Enforcement Division (SLED) is seeking a results-driven information security professional to manage regulatory compliance and risk across the agency. You will support the information security program, enforce security requirements, and coordinate risk controls with state stakeholders.

The role emphasizes collaboration, strong communication, and the ability to translate complex security concepts to non-technical audiences statewide. Travel statewide is required.