IT Security & Privacy Audit Specialist

State-of-South-Carolina; South Carolina; On-site; USD 65,000 - 95,000; Full time

Job summary

South Carolina Department of Corrections seeks an IT Audit professional to plan and conduct comprehensive IT security and privacy audits under the Risk Management & Compliance umbrella. You will help formulate audit policies and provide guidance on data classification, retention and destruction.

Coordination with divisions ensures privacy controls are met. The role emphasizes auditing controls across cloud and on-prem environments with ongoing training to stay current with emerging IT security

Qualifications

• Bachelor's degree in IT systems, computer science, or related field with security-focused IT experience.
• Knowledge of auditing information privacy and security controls and risk assessments (cloud and on‑prem).
• Preferred certifications: CISA, CRISC, CISSP, CIPM.
• Supplemental questions are part of the official application; equal opportunity statement applies.

Responsibilities

• Plan, organize and conduct audits of IT security and privacy systems and controls.
• Assist in policy formulation for privacy and information security audits.
• Assist in data classification, destruction, sharing and retention guidance.
• Perform audits for compliance with IT security and privacy policies.
• Coordinate routine and special audit reports and track results.
• Coordinate with SCDC divisions to meet IT security and privacy requirements.
• Maintain records of IT security/privacy audits and support related efforts.
• Maintain current knowledge to audit emerging controls and IT systems.

Skills

Auditing

IT security

Privacy

NIST frameworks

Data classification

Education

Bachelor's degree in IT/CS

Tools

CISA

CRISC

CISSP

CIPM

Job description

South Carolina Department of Corrections seeks an IT Audit professional to plan and conduct comprehensive IT security and privacy audits under the Risk Management & Compliance umbrella. You will help formulate audit policies and provide guidance on data classification, retention and destruction.

Coordination with divisions ensures privacy controls are met. The role emphasizes auditing controls across cloud and on-prem environments with ongoing training to stay current with emerging IT security