Risk Management & Compliance Analyst I (2 Vacancies)

Doc PersonalBeratung GmbH; South Carolina; Presencial; USD 65 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Paid time off

Parental leave

State retirement plan

Resumo da oferta

The South Carolina Law Enforcement Division (SLED) is seeking an IT security auditor to support CJIS information systems auditing and training. You will assist in documenting audit results and coordinating with the CISO, GRC Manager, and local agencies to strengthen security controls.

Qualified candidates will have a bachelor’s degree and 2+ years of IT auditing or security experience, with familiarity with NIST and FBI CJIS policies. Travel statewide is required.

Qualificações

• Bachelor’s degree in a related field with 2+ years of IT security/auditing experience.
• Familiarity with NIST, FBI CJIS Security Policy, and privacy frameworks.
• Ability to evaluate information security controls and regulatory requirements.

Responsabilidades

• Assist with technical security audits of CJIS information systems.
• Support training on FBI and SLED CJIS policies for local/state agencies.
• Document and report audit results to the SLED CISO, GRC Manager, and agencies.
• Coordinate communication channels to support CJIS security practices.
• Additional duties as assigned by the SLED ISO/GRC Manager.

Conhecimentos

IT auditing

Information security

Policy compliance

Communication

Training

Formação académica

Bachelor’s degree

Associate’s degree

Descrição da oferta de emprego

About SLED

The South Carolina Law Enforcement Division (SLED) is a premier statewide law enforcement agency dedicated to serving and protecting the citizens of South Carolina. With a proud history rooted in integrity, professionalism, and public service, SLED is committed to providing high-quality investigative, intelligence, and forensic services to support law enforcement agencies across the state.

At SLED, we value dedication, ethical conduct, accountability, and a strong commitment to justice. Our agency plays a vital role in maintaining public safety and supporting criminal justice efforts at the local, state, and federal levels. From advanced forensic science to homeland security, criminal investigations, and criminal justice information systems, SLED's diverse responsibilities make it one of the most dynamic law enforcement agencies in the state.

We foster a professional work environment where teamwork, respect, and continuous improvement are fundamental. Our employees are held to the highest standards and are given opportunities to grow within a mission-driven organization that makes a meaningful difference in South Carolina communities.

Learn more about why you should join our team at www.sled.sc.gov.

General Responsibility

Assist with the technical auditing of Criminal Justice Information Services (CJIS) information systems in support of SLED's mission as the FBI CJIS Systems Agency for South Carolina. Assist with the training of local and state agencies on information security best practices, and the policies, procedures, and techniques presented in the FBI CJIS Security Policy. Assist with the documenting and reporting of results of technical audits to the SLED CISO, SLED GRC Manager, and local agencies, and assist in the formulation of agency mitigation responses.

Specific Duties

• Assist the SLED GRC Manager with ensuring that local, state, and federal agencies are in compliance with FBI and SLED CJIS policies and procedures through the administration of the triennial IT Security Audit. Complete technical security audits of the local CJIS user community in a timely manner. Establish and maintain internal and external communication channels to support information security across the CJIS user community.
• Conduct technical security reviews and assessments of agency requests for new access to the SLED CJIS information switch.
• Assist the SLED GRC Manager with training on FBI and SLED CJIS mandated policies and procedures relating to connectivity to the SLED CJIS network. Support local agencies and provide compliance training regarding their access to and utilization of FBI CJIS data.
• Communicate local CJIS user community security-related incidents to the SLED ISO/GRC Manager and appropriate investigative authorities.
• Other duties as determined by the SLED ISO.

• Bachelor's degree and relevant work experience or and associate's degree with a minimum of two (2) years of relevant experience. Relevant experience may be substituted for a degree on a year-for-year basis.
• Must have basic knowledge of information technology (IT) auditing standards, information security standards, and privacy compliance frameworks and principles.
• Must have basic knowledge of principles, methods, and tools used for evaluating information technology/security and privacy risk.
• Must have working knowledge of internal and/or external regulatory policies, standards, procedures, and controls (e.g. National Institute of Standard and Technology (NIST), FBI CJIS Security Policy)
• This position will require statewide travel, including potential overnight travel.

South Carolina Law Enforcement Division (SLED) is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions, including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.

SLED offers an exceptional benefits package for FTE positions that includes:

• Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• State Retirement Plan and Deferred Compensation Programs

Supplemental questions are considered part of the official application. Any misrepresentation of yourself may be grounds for disqualification. Conditional selection based on candidate education, training, experience, oral interviews and clearance of background investigation.