IT Security & Compliance Specialist II

State of North Carolina - Health & Human Services; North Carolina; Hybrid; USD 88,000 - 131,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

The North Carolina DHHS IT division is seeking an IT Security & Compliance Specialist II to consult on security planning, monitoring, and support for cloud infrastructures (AWS, Azure, GCP, Salesforce). The role involves creating technical docs, guiding on best practices, and conducting security assessments to strengthen cloud security posture.

Preferred candidates will have cloud security engineering expertise, knowledge of major compliance standards, and the ability to translate technical

Qualifications

• Bachelor's degree in computer science or a related IT field or equivalent.
• Two years of progressive experience in IT security or closely related area.
• Hands-on experience with cloud security engineering and architecture.
• Knowledge of PCI, SOX, SOC 2, ISO 27001, and NIST 800-53 compliance.

Responsibilities

• Consult in security planning, management, monitoring for cloud infrastructures.
• Develop and implement cloud security policies and reference documents.
• Assess security across AWS, Azure, GCP, and Salesforce environments.
• Communicate complex security concepts to non-technical stakeholders.

Skills

Cloud security

Security architecture

Multi-cloud

Risk management

Security compliance

Non-technical communication

Education

Bachelor's degree in computer science or related IT field

Associate degree in computer science or related IT field

Tools

AWS

Azure

GCP

Salesforce

Job description

AgencyDept of Health and Human ServicesDivisionSEC OFFICE - INFO TECHJob Classification TitleIT Security & Compliance Specialist II (NS)Position Number65039017GradeDT10About UsThe North Carolina Department of Health and Human Services (DHHS) is one of the largest, most complex agencies in the state, and has approximately 17,000 employees. It is responsible for ensuring the health, safety, and well-being of all North Carolinians, providing human service needs for special populations including individuals who are deaf, blind, developmentally disabled, and mentally ill, and helping poor North Carolinians achieve economic independence.Description of WorkThis position will have responsibility to consult in security related planning, management, monitoring and support multiple cloud infrastructures, including Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP), and Salesforce. It will also provide consulting services around the security design, deployment, maintenance, and troubleshooting of the department’s cloud solutions and infrastructure including:• Create detailed technical documentation to support cloud security across multiple environments.• Aid in developing privacy and security policies, procedures, and reference documents.• Serve as a subject matter expert to projects or solution teams by providing guidance on best practices related to information security.• Conduct security assessments and compliance checks on cloud solutions and environments.• Work with vendors and third-party service providers to ensure their services meet security requirements.• Participate in regular status meetings with IT leadership as well as other stakeholders regarding current projects and future initiatives cloud security posture.• Work to create a cloud-based security platform that monitors and analyzes data from multiple sources to identify potential threats.• Develop and implement a strategy for detecting anomalous behavior within machine learning cloud environments.Knowledge Skills and Abilities/Management PreferencesSalary Grade Range: $87,617.00 - $131,426.00Recruitment Range: $87,617.00 - $120,474.00Candidates now meet the minimum qualifications of a position if they meet the minimum education and experience listed on the vacancy announcement.The Knowledge, Skills, and Abilities (KSAs)/ Management Preferences are not required. Applicants who possess the following skills are preferred:Demonstrated expertise in cloud security engineering and architecture, including cloud-native security technologies, networking, compute, storage, databases, operating systems, virtualization, orchestration, multi-tenancy, elastic scalability, microservices, and serverless technologies.Hands-on experience designing and implementing secure multi-cloud and hybrid-cloud solutions, with a focus on scalability, security, reliability, extensibility, manageability, and operational requirements.Strong knowledge of security compliance and risk management, including PCI, SOX, SOC 2, ISO 27001, and NIST 800-53, with the ability to apply compliance requirements, assess risk, and evaluate short- and long-term business impacts in complex environments.Experience configuring and tuning security tools and controls to maximize capabilities, minimize false positives, optimize resources, and support effective security operations.Demonstrated ability to communicate complex technical and security concepts to non-technical audiences, translating technical risks, solutions, and recommendations into clear business-focused outcomes.The Posting Will Close At 11:59 P.M. The Night Before The End DateThis Position Is Funded In Part Through Federal FundsThis Role Is Eligible To Be Hybrid And Requires Onsite Reporting Located Within Raleigh, NCAbout the NC DHHS Information Technology Division:In collaboration with our partners, the North Carolina Department of Health and Human Services (DHHS) protects the health and safety of all North Carolinians and provides essential health and human services. The IT division (ITD) is one of the divisions that report to the Operational Excellence portfolio. The ITD division comprises four sections: Implementation and Operations, Strategy and Workforce, Enterprise Technology, and Vendor and Finance. ITD offers the following services but not limited to implementations, operations, project/portfolio management, infrastructure, consulting, business division liaison, digital transformation, ITAbout the Office of the Secretary:The Office of the Secretary serves as the executive leadership arm of the North Carolina Department of Health and Human Services (NCDHHS), guiding the Department’s mission to improve the health, safety, and well-being of all North Carolinians. Through strategic oversight and collaborative leadership, the Secretary’s Office supports the effective coordination of over a dozen core divisions, ensuring that agency-wide priorities are aligned, resources are used responsibly, and services are delivered with equity and impact.Compensation and Benefits:The State of North Carolina offers excellent comprehensive benefits. Employees can participate in health insurance options, standard and supplemental retirement plans, and the NCFlex program (numerous high-quality, low-cost benefits on a pre-tax basis). Employees also receive paid vacation, sick, and community service leave. In addition, paid parental leave is available to eligible employees. Visit the website for State Benefits .Supplemental Contact InformationThe North Carolina Department of Health and Human Services (DHHS) is an Equal Opportunity Employer that embraces an Employment First philosophy, which consists of complying with all federal laws, state laws, and Executive Orders. We are committed to reviewing requests for reasonable accommodation at any time during the hiring process or while on the job. For more information about DHHS: https://www.ncdhhs.gov/ .DHHS uses the Merit-Based Recruitment and Selection Plan to fill positions subject to the State Human Resources Act with the most qualified individuals. Hiring salary will be based on relevant qualifications, internal equity, and budgetary considerations pertinent to the advertised position.In accordance with the Governor’s Executive Order 303 , our agency supports second-chance employment for individuals who were previously incarcerated or justice-involved. We invite all potential applicants to apply for positions for which they may be qualified.Application ProcessBe sure to complete the application in its entirety. Resumes will not be accepted in lieu of completing this application.Information should be provided in the appropriate areas, to include the following: Education, including high school and all degrees obtained, Work Experience, and Certificates & Licenses. It is critical to our screening and salary determination process that applications contain comprehensive candidate information.Answers to Supplemental Questions are not a substitute for providing all relevant information within the body of your application. To receive credit for the supplemental questions, you must provide supporting information within the \"Work Experience\" section of the application to support your answers.If multiple applications are submitted to an individual posting, only the most recent application received prior to the closing date will be accepted. Applications must be submitted by 11:59 PM on the closing date.Applicants may be subject to a criminal background check. All candidates selected for positions considered \"Positions of Trust\" will be subject to a criminal background check.Due to the volume of applications received, we are unable to provide information regarding the status of your application over the phone. To check the status of your application, please log in to your account. Upon the closing date, applications are \"Under Review\" and will be screened by Human Resources for qualified applicants. The hiring process may take several weeks.Degrees must be received from appropriately accredited institutions. Transcripts and degree evaluations may be uploaded with your application. The State of North Carolina/Office of State Human Resources uses the National Association of Credential Evaluation Services (NACES) as a referral resource for applicants who need to have their credentials certified as equivalent.For a list of organizations that perform this specialized service, please visit the NACES membership website at https://www.naces.org/members .Degree/College Credit VerificationDegrees must be received from appropriately accredited institutions. Transcripts, degree evaluations, and cover letters may be uploaded with your application.Veterans’ and National Guard PreferenceApplicants seeking Veteran's Preference must attach a DD-214 Member-4 Form (Certificate of Release or Discharge from Active Duty) to their applications.Applicants seeking National Guard Preference must attach an NGB 23A (RPAS), along with the state application, if they are a current member of the NC National Guard in good standing.Applicants who are former members of either the NC Army National Guard or the NC Air National Guard, with honorable discharge and six years of creditable service, must attach a copy of the DD 256 or NGB 22, along with the state application.ADA AccommodationsConsistent with the Americans with Disabilities Act (ADA) and the Pregnant Workers Fairness Act (PWFA), DHHS is committed to the full inclusion of all qualified individuals. As part of this commitment, DHHS will ensure that people with disabilities, or known limitations covered by the PWFA, are provided with reasonable accommodation. If reasonable accommodation is needed to participate in the job application or interview process, please contact the person indicated below.CONTACT INFORMATION:If there are any questions about this posting, please contact Talent Acquisition. Resumes will not be accepted in lieu of completing this application.Minimum Education and ExperienceSome state job postings say you can qualify by an “equivalent combination of education and experience.” If that language appears below, then you may qualify through EITHER years of education OR years of directly related experience, OR a combination of both. See the Education and Experience Equivalency Guide for details.Bachelor's degree in computer science or a related IT field or related degree from an appropriately accredited institution and two years of progressive experience in IT Security or closely related areaORAssociate degree in computer science or a related IT field or related degree from an appropriately accredited institution and three years of progressive experience in IT Security or closely related areaORAn equivalent combination of education and experienceEEO StatementT he State of North Carolina is an Equal Employment Opportunity Employer and dedicated to providing employees with a work environment free from all forms of unlawful employment discrimination, harassment, or retaliation. The state provides reasonable accommodation to employees and applicants with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for religious beliefs, observances, and practices.Recruiter:Dreisa Yvonne JohnsonContact:DHHS Workday Support Form