GRC Security Lead - Audit, Policy & Compliance

Other; Tallahassee (FL); On-site; USD 85,000 - 130,000; Full time

Job summary

The Florida Department of Law Enforcement is seeking a seasoned information security leader to supervise the governance, risk, and compliance team within information security services in Tallahassee.

The role manages the information security program, leads cybersecurity compliance audits, develops policies and standards, and communicates findings to agency leadership, supporting the CISO and Information Security Manager in strengthening the organization's security posture across the agency.

Qualifications

• At least three years of experience in technical auditing, information security, or governance, risk and compliance.
• Knowledge of information security tools, services, and systems within an organization.
• Knowledge of operating systems as they relate to computer security and auditing.
• Ability to develop, test and evaluate security controls.
• Knowledge of NIST CSF framework and FAC 60-GG security requirements.
• Knowledge and experience with audit processes and procedures.

Responsibilities

• Oversee the governance, risk, and compliance team within information security services.
• Manage the information security program and drive improvements.
• Lead audits of cybersecurity compliance and report findings to agency leadership.
• Develop and update information security policies and standards.
• Collaborate with the CISO and Information Security Manager to strengthen the organization''s security posture.

Skills

Technical auditing

Information security

Governance, risk and compliance

Audit processes

Security controls testing

NIST CSF knowledge

Job description

The Florida Department of Law Enforcement is seeking a seasoned information security leader to supervise the governance, risk, and compliance team within information security services in Tallahassee.

The role manages the information security program, leads cybersecurity compliance audits, develops policies and standards, and communicates findings to agency leadership, supporting the CISO and Information Security Manager in strengthening the organization's security posture across the agency.