Remote ERP Security Lead – Independent Assurance

The Morganfield Group; Greensboro (NC); Remote; USD 140,000 - 190,000; Part time

Job summary

The Morganfield Group leads advisory for a U.S. county government ERP transformation, focusing on security requirements and independent assurance across HR, payroll, finance and procurement streams.

Remote work is supported for analysis and documentation; occasional travel to Greensboro, NC is expected. Engagement is contract-based with phased staffing and start dates aligned to strategy, design, and testing phases.

Qualifications

• ERP or cloud security on government or regulated programs: access design, segregation of duties, privileged accounts and sensitive-data protection.
• Independent validation of a provider’s security design and production readiness, with tested remediation and documented residual risk.
• CISSP, CISA or similar credentials and local-government experience preferred.

Responsibilities

• Define vendor-neutral security and compliance requirements for selection and solution design with client IT and security owners.
• Review role-based access, segregation of duties, privileged and service accounts, integration identities and access-review controls.
• Set data-handling, masking, approved-transfer, environment-access and audit-evidence requirements.
• Coordinate security testing, remediation and production-readiness evidence with the client and the SI; support operational handover.
• Document residual-risk decisions for client security-owner acceptance.

Skills

ERP security

Cloud security

Independent validation

CISSP

CISA

Local-government experience

Job description

The Morganfield Group leads advisory for a U.S. county government ERP transformation, focusing on security requirements and independent assurance across HR, payroll, finance and procurement streams.

Remote work is supported for analysis and documentation; occasional travel to Greensboro, NC is expected. Engagement is contract-based with phased staffing and start dates aligned to strategy, design, and testing phases.