INFORMATION SECURITY GOVERNANCE, RISK, AND COMPLIANCE SUPERVISOR - 71000521

State of Florida; Tallahassee (FL); Vor Ort; USD 61.000 - 75.000; Vollzeit

Benefits dieser Stelle

Tuition waiver program

Health insurance (HMO/PPO)

Paid holidays and leave

Life insurance coverage

Pension and retirement plan

Zusammenfassung

Florida Department of Law Enforcement (FDLE) seeks an Information Security Governance, Risk, and Compliance Supervisor to lead the GRC team, audit security programs, and develop policies ensuring compliance with state and federal regulations. This role reports to ITS leadership in Tallahassee and collaborates with the CISO/CIO to strengthen FDLE’s security posture.

The position offers a competitive salary and comprehensive benefits as part of the Florida state employment package, with growth

Qualifikationen

• At least three years of experience in technical auditing, information security or governance, risk and compliance.
• Degrees must be from an accredited college or university as recognized by the U.S. Department of Education.

Aufgaben

• Develop plans, tasks and project schedules and coordinate with ITS sections.
• Prepare reports and analysis of information security laws, rules, and guidelines.
• Lead audits to identify security compliance gaps and coordinate with audits of the FDLE information security program.
• Design and deliver security awareness training for staff on compliance and best practices.

Kenntnisse

Technical auditing

Information security

Governance, risk & compliance

NIST CSF familiarity

Ausbildung

Bachelor's degree or higher

Tools

O365 security applications

Policy drafting tools

Jobbeschreibung

INFORMATION SECURITY GOVERNANCE, RISK, AND COMPLIANCE SUPERVISOR - 71000521

Agency: Department of Law Enforcement

Working Title: INFORMATION SECURITY GOVERNANCE, RISK, AND COMPLIANCE SUPERVISOR - 71000521

INFORMATION SECURITY GOVERNANCE, RISK, AND COMPLIANCE SUPERVISOR

INFORMATION TECHNOLOGY SERVICES

CUSTOMER SERVICE ADMINISTRATION CENTER/CUSTOMER SUPPORT (DAY SHIFT)

POSITION SUMMARY:

This position responsible for assisting in the ongoing support and administration of the Department’s information security program. This position is also responsible for supervising all governance, risk and compliance team members of the information security support group. The incumbent is responsible for communicating with, motivating, training and evaluating members while planning and directing their work. This position is responsible for managing information security programs and measures related to data and information technology resources in the Florida Department of Law Enforcement and for supervising members assigned to support the information security program as well as projects. This position will lead the members of the GRC team in auditing, identifying and establishing a plan for cybersecurity gaps and improvements. This position supports both the FDLE CISO and ISM in daily efforts to improve the information security program.

DUTIES & RESPONSIBILITIES:

Specific duties include:

• Developing plans, tasks and project schedules and coordinating work with other ITS sections to complete the goals and tasks identified in the agency strategic operational plan;
• Preparing written reports and analysis of information security laws, rules, legislation, policy and guidelines;
• Presenting findings and recommendations to the CIO, CISO, ITS managers, and agency leadership;
• Responsible for the development and maintenance of FDLE’s information security policies, standards, and procedures;
• Working with the CISO, CIO and ISM to measure compliance with regulatory frameworks for Cybersecurity;
• Performing audits to identify security compliance gaps. Serve as point of contact for audits of the FDLE information security program;
• Responsible for designing training on security awareness to educate staff on compliance and best practices;
• Acting as a liaison between technical and non-technical staff as it relates to the procurement of new software-as-a-service (SaaS)/cloud solutions being evaluated for agency use;
• Ensuring that enterprise and SaaS vendors adhere to baseline security requirements; and
• Responsible for communicating key performance indicators (KPIs), and risk metrics to FDLE leadership.

To be considered as a potential candidate, you must meet the minimum qualifications(s) listed below. Degrees must be from an accredited college or university as recognized by the U.S. Department of Education.

MINIMUM QUALIFICATIONS:

• At least three years of experience in technical auditing, information security or governance, risk and compliance

KNOWLEDGE, SKILLS & ABILITIES:

• Knowledge of operating systems and/or telecommunications concepts;
• Knowledge and experience with information security tools, services, and systems used to support an information security program within an organization;
• Knowledge of operating systems as they relate to computer security and auditing;
• Ability to develop, test and evaluate security controls;
• Knowledge of O365 security applications;
• Knowledge and experience of policy design and drafting;
• Knowledge of state and national security requirements such as NIST CSF framework and FAC 60-GG;
• Knowledge of data protection methodologies; and
• Knowledge and experience with audit processes and procedures.

Note: Responses to qualifying questions must be clearly supported by the state application and any omission, falsification, or misrepresentation in the answering of the qualifying questions will be cause for immediate elimination from the selection process.

BASE SALARY:

• $68,289.00

HOW YOU WILL GROW:

FDLE recognizes the importance of growth and success while fostering a family-oriented work environment. We encourage our members to seek opportunities for professional growth through training, team building, and mentoring. Our four Fundamental Values of Service, Integrity, Respect and Quality will guide you as you embark on a lifelong career at FDLE.

OUR SALARY & BENEFITS:

Starting salary will be the minimum of the class pay range, unless otherwise dictated by FDLE’s pay policy. FDLE is a State of Florida Employer and offers a comprehensive benefits package, including:

• State of Florida Tuition Waiver Program;
• Paid holidays, vacation and sick leave;
• HMO and PPO health insurance options with premiums starting as low as $50 per month;
• $25,000 in automatic life insurance coverage;
• Multiple supplemental insurance options including: dental, vision, disability and more;
• Paid maternity leave and parental leave following the birth or adoption of a child;
• Pension and investment retirement plan options; and
• Tax deferred medical and child care reimbursement accounts.

ABOUT OUR AGENCY:

The Florida Department of Law Enforcement (FDLE) employs more than 2,000 members statewide – either at headquarters in Tallahassee or in one of seven regional operations centers (ROCs). Our mission is to promote public safety and strengthen domestic security.

HIRING PROCESS:

You will be evaluated for this job based on your previous knowledge and experience. Additional reviews may be performed to screen for preferred qualifications, experience and education. Your qualifications will be based on knowledge, skills, and abilities and other elements relevant to this position supported by the information in your application. Qualifying questions will only be credited if verifiable by the information provided on your application including specifically required software/computer skills. You may be contacted to participate in a selection process which may consist of written exercises, work samples, skills tests, interviews, drug screen and fingerprinting. You may be notified by email to participate in a selection process. Failure to reply within a designated timeframe may exclude you from further consideration.Future vacancies may be filled from this position advertisement.

BACKGROUND:

FDLE requires an extensive background process of all recommended applicants. The elements of a background include: financial credit check, criminal history of applicant and applicant’s immediate family or roommates, personal references, employment and education verifications (which includes official transcript(s)), drug screen and fingerprinting. This information will be utilized to make the final hiring decision.

NOTES:

Preference will be given to current