Hybrid IT Security Director - Lead Risk & Compliance

State of Tennessee; Nashville (TN); Hybrid; USD 103,000 - 134,000; Full time

Job summary

The Tennessee Department of Human Services, within Strategic Technology Solutions in Nashville, seeks an IT Security Director. The role leads security, audit, risk, and compliance for the agency, coordinating with cybersecurity partners, program and infrastructure teams, auditors, and vendors to protect systems and sensitive information.

The position focuses on strengthening security posture and audit readiness while guiding modernization, cloud, data, AI, and automation initiatives.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, MIS, or related field preferred.
• Progressively responsible experience in information security, technology risk, IT audit, or compliance required.
• Experience coordinating audits, evaluating controls and evidence, managing corrective actions, and working across teams.

Responsibilities

• Lead security, audit, risk, and compliance work across DHS, STS partners, program teams, and vendors.
• Coordinate audit activities, ensure timely submissions, and address findings and corrective actions.
• Manage audit intake, evidence collection, response prep, and control walkthroughs.
• Oversee IAM platform and related processes including access reviews and onboarding/offboarding.
• Develop and maintain agency security policies, standards, and procedures.

Skills

Security leadership

Policy development

Risk assessment

Audits & compliance

Vendor security

Education

Bachelor's degree in Cybersecurity

Tools

IAM platforms

Job description

The Tennessee Department of Human Services, within Strategic Technology Solutions in Nashville, seeks an IT Security Director. The role leads security, audit, risk, and compliance for the agency, coordinating with cybersecurity partners, program and infrastructure teams, auditors, and vendors to protect systems and sensitive information.

The position focuses on strengthening security posture and audit readiness while guiding modernization, cloud, data, AI, and automation initiatives.