GRC Manager

State of South Carolina; South Carolina; On-site; USD 65,000 - 100,000; Full time

Benefits offered by this job

Health, Dental, Vision insurance

15 days annual leave

15 days sick leave

13 paid holidays

Paid Parental Leave

State Retirement Plan

Job summary

South Carolina Law Enforcement Division (SLED) is seeking a compliance and information security professional to manage and coordinate activities ensuring conformity with laws, regulations, and information security standards across the agency.

The role emphasizes risk assessment, data classification, security program development, and training to educate employees on governance, risk, and compliance, with statewide travel required.

Qualifications

• Bachelor's degree in a related field and three years relevant work experience.
• Moderate knowledge of system networks, diagrams, firewalls, routers, and other security devices.
• Knowledge of cyber security frameworks.
• Excellent communication, interpersonal, and leadership skills.
• Knowledge of governance, risk, and compliance (GRC) program management.
• Ability to act as liaison and effectively communicate information security topics (e.g., data constraints, information needs) to both technical and non-technical audiences throughout the state.
• Travel statewide, including overnight travel, will be required.

Responsibilities

• Plan, organize, and monitor regulatory enforcement activities to ensure that all applicable statues, regulations, industry standards are met. Provide reports and advise senior management on regulatory requirements and emerging risk. Support the maintenance of the information security framework by updating controls in conjunction with changes in the regulatory environment.
• Support risk management activities (e.g. risk assessments, gap analysis, business impact analysis) to identify current and future threats and help organization reach an acceptable level of risk. Monitor and report on the effectiveness of risk controls and make recommendations for improvement.
• Aid with the establishment and maintenance of the agency's information security program and associated strategies to support the business processes and overall goals of the organization. Enforce security requirements during the design, development, testing, and delivery of information systems.
• Assist with the classification of data based on its sensitivity level and ensure that data is properly managed and secured according to regulatory requirements and enterprise adopted standards. Identify and document data handling and storage requirements for each classification level. Monitor and audit data usage to ensure compliance with classification policies.
• Develop and deliver security awareness programs to educate employees on governance, risk, and compliance requirements and expectations for the organization. Monitor and report on the effectiveness of the security awareness programs and provide recommendations for improvements.

Skills

Cyber security frameworks

Network security basics

Communication skills

GRC program management

Liaison/communication

Education

Bachelor's degree in a related field

Job description

About SLED

The South Carolina Law Enforcement Division (SLED) is a premier statewide law enforcement agency dedicated to serving and protecting the citizens of South Carolina. With a proud history rooted in integrity, professionalism, and public service, SLED is committed to providing high-quality investigative, intelligence, and forensic services to support law enforcement agencies across the state.

At SLED, we value dedication, ethical conduct, accountability, and a strong commitment to justice. Our agency plays a vital role in maintaining public safety and supporting criminal justice efforts at the local, state, and federal levels. From advanced forensic science to homeland security, criminal investigations, and criminal justice information systems, SLED's diverse responsibilities make it one of the most dynamic law enforcement agencies in the state.

We foster a professional work environment where teamwork, respect, and continuous improvement are fundamental. Our employees are held to the highest standards and are given opportunities to grow within a mission-driven organization that makes a meaningful difference in South Carolina communities.

Learn more about why you should join our team at www.sled.sc.gov.

General Responsibility

Manage and coordinate professional work examining, evaluating, and/or monitoring conformity with laws, regulation, information security, privacy or other business standards. Supervise compliance activities as it relates to the CJIS, PCI, and CALEA conformity.

Specific Duties

• Plan, organize, and monitor regulatory enforcement activities to ensure that all applicable statues, regulations, industry standards are met. Provide reports and advise senior management on regulatory requirements and emerging risk. Support the maintenance of the information security framework by updating controls in conjunction with changes in the regulatory environment.
• Support risk management activities (e.g. risk assessments, gap analysis, business impact analysis) to identify current and future threats and help organization reach an acceptable level of risk. Monitor and report on the effectiveness of risk controls and make recommendations for improvement.
• Aid with the establishment and maintenance of the agency's information security program and associated strategies to support the business processes and overall goals of the organization. Enforce security requirements during the design, development, testing, and delivery of information systems.
• Assist with the classification of data based on its sensitivity level and ensure that data is properly managed and secured according to regulatory requirements and enterprise adopted standards. Identify and document data handling and storage requirements for each classification level. Monitor and audit data usage to ensure compliance with classification policies.
• Develop and deliver security awareness programs to educate employees on governance, risk, and compliance requirements and expectations for the organization. Monitor and report on the effectiveness of the security awareness programs and provide recommendations for improvements.

• Bachelor's degree in a related field and three years relevant work experience.
• Moderate knowledge of system networks, diagrams, firewalls, routers, and other security devices.
• Knowledge of cyber security frameworks.
• Excellent communication, interpersonal, and leadership skills.
• Knowledge of governance, risk, and compliance (GRC) program management.
• Ability to act as liaison and effectively communicate information security topics (e.g., data constraints, information needs) to both technical and non-technical audiences throughout the state.
• Travel statewide, including overnight travel, will be required.

• CISA, CRISC, or CISM certifications are preferred.

South Carolina Law Enforcement Division (SLED) is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions, including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.

SLED offers an exceptional benefits package for FTE positions that includes:

• Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• State Retirement Plan and Deferred Compensation Programs

Supplemental questions are considered part of the official application. Any misrepresentation of yourself may be grounds for disqualification. Conditional selection based on candidate education, training, experience, oral interviews and clearance of background investigation.