IT Security & Compliance Specialist I - EHRA

Arts In Wilmington; North Carolina; Ibrido; USD 76.000 - 114.000; Tempo pieno

Descrizione del lavoro

The North Carolina Department of Information Technology is seeking an IT Security & Compliance Specialist I (EHRA) in Wake County. The role supports security control monitoring, risk tracking, and compliance documentation under general supervision.

Salary ranges from $75,818 to $113,727 per year; hybrid remote work may be eligible with onsite weekly requirements. Candidates should have a Bachelor's or Associate degree in IT and experience in IT security, with familiarity with NIST, CIS, HIPAA,

Competenze

• Foundational knowledge of information security principles and terminology.
• Familiarity with security frameworks (NIST, CIS, HIPAA) and state IT standards.
• Ability to translate policies into practical security requirements.

Mansioni

• Monitor security controls and respond to incidents.
• Support risk assessments, audits, and remediation tracking.
• Maintain security documentation and system security plans.
• Assist with vulnerability management and access control monitoring.

Conoscenze

Information security basics

NIST/CIS familiarity

HIPAA familiarity

Formazione

Bachelor's degree in IT or related field

Associate degree in IT or related field

Strumenti

Firewalls

VPNs

WAFs

Descrizione del lavoro

IT Security & Compliance Specialist I - EHRA page is loaded## IT Security & Compliance Specialist I - EHRAlocations: Wake County, NCtime type: Full timeposted on: Posted Todaytime left to apply: End Date: November 12, 2026 (7 days left to apply)job requisition id: JR-127887**Agency**Department of Information Technology**Division**Chief Deputy SCIO**Job Classification Title**IT Security & Compliance Specialist I (NS)**Position Number**60036085**Grade**DT08The N.C. Department of Information Technology (NCDIT) serves as the Technology Center for the State of NC. Services that NCDIT provides reach a client base of state and local government agencies, as well as schools, colleges and universities. NCDIT's mission is to enable trusted business-driven solutions that meet the needs of North Carolinians. NCDIT provides technology services to state agencies and is charged with closing the digital divide by expanding availability of broadband services and promoting the adoption of affordable, high-speed internet.**Description of Work**Salary Range: $75,818 - $113,727The position is designated Statutory Exempt (EHRA) and is exempt from the State Human Resources Act.This position may be eligible for hybrid remote work in accordance with state policy and the agency's remote work program but does require weekly onsite work. Any telework will be under the conditions of the state Teleworking Program Policy and the employer may end any teleworking arrangement at any time in the employer's sole discretion.We currently have an opening for an IT Security & Compliance Specialist I.The Security and Compliance Specialist I supports the Department of Environmental Quality's (DEQ) information security, risk management, and regulatory compliance programs. This position performs entry-level professional work assisting with security control monitoring, compliance documentation, audit support, and risk tracking in accordance with State of North Carolina IT security policies, standards, and frameworks. The position works under general supervision and follows established procedures and guidelines.Key Responsibilities:Information Security Operations- Support the implementation and maintenance of security controls across agency systems.- Monitor security tools, alerts, and reports to identify threats, mitigate risks, and escalate incidents as needed.- Assist with vulnerability management, security configuration reviews, and access control monitoring.- Support the administration of firewalls, VPNs, web application firewalls (WAFs), and other security technologies.Compliance & Risk Management- Support compliance with state and federal security requirements and frameworks, including NIST, CIS, HIPAA, and the NC Statewide Information Security Manual.- Maintain security documentation, policies, procedures, and system security plans.- Assist with risk assessments, control evaluations, audits, and remediation tracking.Audit & Security Assessments- Support internal and external audits by gathering documentation and responding to information requests.- Assist with annual risk assessments, security reviews, and validation of security controls.- Document findings and track corrective actions to completion.Security Awareness & Training- Support security awareness initiatives, training programs, and user guidance.- Develop and maintain security documentation, job aids, and process materials.Collaboration & Reporting- Partner with IT teams, business units, and external stakeholders to support security and compliance objectives.- Prepare reports, metrics, and status updates on security, risk, compliance, and remediation activities.- Communicate risks, issues, and progress to leadership and security management.About the Division:The Information Technology Services division supports the constituent programs and divisions of the N.C. Department of Environmental Quality with tools and technologies necessary to effectively advance DEQs mission of conserving and protecting North Carolina's natural resources.**Knowledge Skills and Abilities/Management Preferences****The following Management Preferences are not required, but applicants that possess these skills are preferred:*** Foundational knowledge of information security principles, best practices, and terminology, with an interest in putting that knowledge into action.* Familiarity with security and compliance frameworks, including the NIST 800-series, CIS Controls, HIPAA and State IT security standards.* Ability to review and interpret policies, procedures, and technical documentation and translate them into practical understanding.Discover why NCDIT is the ideal destination for your professional growth -**Minimum Education and Experience**Some state job postings say you can qualify by an \"equivalent combination of education and experience.\" If that language appears below, then you may qualify through EITHER years of education OR years of directly related experience, OR a combination of both. See the for details.Bachelor's degree in Computer Science or a related IT related field or closely related field from an appropriately accredited institution and one year experience in IT Security;**Or**Associate degree in Computer Science or a related IT related field or closely related field from an appropriately accredited institution and two years of experience in IT Security; or an equivalent combination of education and experience.**EEO Statement**The State of North Carolina is an Equal Employment Opportunity Employer and dedicated to providing employees with a work environment free from all forms of unlawful employment discrimination, harassment, or retaliation. The state provides reasonable accommodation to employees and applicants with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for religious beliefs, observances, and practices.**Recruiter:**Anaja Lakeiya McClinton**Recruiter Email:**dit\\_hr\\[e-mail]