Public Sector IT Security & Compliance Lead

City of St. Charles; St. Charles (IL); On-site; USD 103,000 - 144,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Wellness incentives

Life insurance

Pension plan (IMRF)

Other retirement options

Job summary

The City of St. Charles seeks a highly skilled IT leader to advance cybersecurity and compliance across City operations. This role works across departments to build a security-first culture while aligning with industry standards, safeguarding public services, and protecting data.

You will oversee risk assessments, policy development, vendor management, and security awareness initiatives, with responsibility for after-hours support during incidents and major operations.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or a closely related field.
• Minimum of five (5) years of experience in cybersecurity, compliance, or information security.
• Strong written and verbal communication skills with ability to explain complex concepts to varied audiences.

Responsibilities

• Lead cybersecurity and compliance initiatives across City operations.
• Assess, analyze, and recommend security safeguards; review security controls and risks.
• Develop and maintain security policies, standards, and documentation; translate regulations into controls.

Skills

Cybersecurity

Risk management

Compliance governance

Security frameworks

Vendor management

Security awareness

Communication

Analytical thinking

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

CISSP / CISA / CISM / CRISC / CCSP or equivalent

Tools

CIS Controls

NIST CSF

ISO 27001

HIPAA / PCI-DSS familiarity

Job description

The City of St. Charles seeks a highly skilled IT leader to advance cybersecurity and compliance across City operations. This role works across departments to build a security-first culture while aligning with industry standards, safeguarding public services, and protecting data.

You will oversee risk assessments, policy development, vendor management, and security awareness initiatives, with responsibility for after-hours support during incidents and major operations.