IT Security & Compliance Leader — Hybrid in Raleigh

State of North Carolina; North Carolina; Hybrid; USD 92,000 - 160,000; Full time

Benefits offered by this job

Health insurance options

Retirement plans

Paid vacation and sick leave

Parental leave

Job summary

The North Carolina Department of Health and Human Services (NCDHHS) is seeking an IT Security & Compliance Manager I (NS) in Raleigh to lead security staff and oversee information security, risk management, and compliance programs, including BCP, COOP, DR, and BIA.

The role provides strategic oversight of ServiceNow IRM/GRC, risk assessments, policy management, audit management, remediation, and reporting, ensuring federal/state requirements are met while coordinating with agencies and auditors.

Qualifications

• Strategic Information Security and Risk Management – Ability to lead and oversee enterprise information security, privacy, risk management, governance, and compliance programs while aligning security strategies with organizational priorities.
• Regulatory Compliance – Knowledge of federal and state security, privacy, and regulatory requirements, with the ability to manage audits, reviews, assessments, corrective actions, and relationships with oversight agencies.
• Business Continuity and Enterprise Resilience – Ability to oversee BCP, COOP, DR, and BIA programs to ensure organizational preparedness, operational resilience, and effective recovery from disruptions.
• GRC and ServiceNow Leadership – Ability to strategically manage technology-enabled risk and compliance programs, including ServiceNow IRM/GRC, to improve risk visibility, compliance monitoring, reporting, and operational effectiveness.
• Leadership and Stakeholder Management – Ability to lead multidisciplinary staff, establish priorities, manage complex initiatives, and effectively communicate and collaborate with executive leadership, business units, technical teams, regulators, auditors, and external partners.

Responsibilities

• Oversee IT security staff and leadership for security, risk management, compliance, and business continuity programs.
• Provide strategic oversight of IRM and GRC programs including risk assessments, policy management, audit management, remediation, and reporting.
• Coordinate security reviews, audits, and corrective actions with federal and state agencies, auditors, and oversight bodies.
• Develop staff, set priorities, manage resources, and strengthen the department’s overall security posture.

Skills

Strategic Information Security & Risk

Regulatory Compliance

Business Continuity & Resilience

GRC & ServiceNow Leadership

Leadership & Stakeholder Management

Education

Bachelor’s degree in computer science or related IT field

Associate degree in computer science or related IT field

Job description

The North Carolina Department of Health and Human Services (NCDHHS) is seeking an IT Security & Compliance Manager I (NS) in Raleigh to lead security staff and oversee information security, risk management, and compliance programs, including BCP, COOP, DR, and BIA.

The role provides strategic oversight of ServiceNow IRM/GRC, risk assessments, policy management, audit management, remediation, and reporting, ensuring federal/state requirements are met while coordinating with agencies and auditors.