Security & Compliance Administrator — Government IT

Metropolitan Government of Nashville & Davidson County; Nashville (TN); On-site; USD 90,000 - 140,000; Full time

Job summary

Metropolitan Government of Nashville & Davidson County seeks a Security and Compliance Administrator to develop and enforce security policies, conduct vulnerability assessments, and implement safeguards protecting the Courts’ core operations.

The role requires strong cybersecurity knowledge, proactive mindset, and experience with HIPAA, CJIS, FERPA, PCI-DSS, and related frameworks. Responsibilities include audits, training, incident response, and budget tracking.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field with three years of IT security experience.
• Experience with application penetration testing is a plus.
• Experience with government compliance frameworks such as CJIS, HIPAA, or FISMA.
• Additional relevant certifications encouraged (e.g., CISSP, CISA, CISM) from recognized bodies.

Responsibilities

• Develop and enforce security policies for core systems and data.
• Perform vulnerability assessments and ensure timely remediation.
• Monitor systems for suspicious activity and investigate incidents.
• Manage role-based access controls and user provisioning/deprovisioning.
• Prepare compliance reports and maintain documentation for audits.
• Deliver security training to staff and awareness programs.
• Collaborate with stakeholders to address compliance issues.
• Lead incident response efforts and document communications.
• Track information security budget and expenditures.

Skills

Cybersecurity best practices

HIPAA

CJIS

FERPA

PCI-DSS

Vulnerability assessments

Security monitoring

RBAC access control

Incident response

Documentation

Audits & compliance

Education

Bachelor’s degree in Computer Science / Information Security

Tools

SIEM

IDS/IPS

Firewalls

Job description

Metropolitan Government of Nashville & Davidson County seeks a Security and Compliance Administrator to develop and enforce security policies, conduct vulnerability assessments, and implement safeguards protecting the Courts’ core operations.

The role requires strong cybersecurity knowledge, proactive mindset, and experience with HIPAA, CJIS, FERPA, PCI-DSS, and related frameworks. Responsibilities include audits, training, incident response, and budget tracking.