Security & Compliance Manager

State of North Carolina; North Carolina; Hybrid; USD 92,000 - 160,000; Full time

Benefits offered by this job

Health insurance options

Retirement plans

Paid vacation and sick leave

Parental leave

Job summary

The North Carolina Department of Health and Human Services (NCDHHS) is seeking an IT Security & Compliance Manager I (NS) in Raleigh to lead security staff and oversee information security, risk management, and compliance programs, including BCP, COOP, DR, and BIA.

The role provides strategic oversight of ServiceNow IRM/GRC, risk assessments, policy management, audit management, remediation, and reporting, ensuring federal/state requirements are met while coordinating with agencies and auditors.

Qualifications

• Strategic Information Security and Risk Management – Ability to lead and oversee enterprise information security, privacy, risk management, governance, and compliance programs while aligning security strategies with organizational priorities.
• Regulatory Compliance – Knowledge of federal and state security, privacy, and regulatory requirements, with the ability to manage audits, reviews, assessments, corrective actions, and relationships with oversight agencies.
• Business Continuity and Enterprise Resilience – Ability to oversee BCP, COOP, DR, and BIA programs to ensure organizational preparedness, operational resilience, and effective recovery from disruptions.
• GRC and ServiceNow Leadership – Ability to strategically manage technology-enabled risk and compliance programs, including ServiceNow IRM/GRC, to improve risk visibility, compliance monitoring, reporting, and operational effectiveness.
• Leadership and Stakeholder Management – Ability to lead multidisciplinary staff, establish priorities, manage complex initiatives, and effectively communicate and collaborate with executive leadership, business units, technical teams, regulators, auditors, and external partners.

Responsibilities

• Oversee IT security staff and leadership for security, risk management, compliance, and business continuity programs.
• Provide strategic oversight of IRM and GRC programs including risk assessments, policy management, audit management, remediation, and reporting.
• Coordinate security reviews, audits, and corrective actions with federal and state agencies, auditors, and oversight bodies.
• Develop staff, set priorities, manage resources, and strengthen the department’s overall security posture.

Skills

Strategic Information Security & Risk

Regulatory Compliance

Business Continuity & Resilience

GRC & ServiceNow Leadership

Leadership & Stakeholder Management

Education

Bachelor’s degree in computer science or related IT field

Associate degree in computer science or related IT field

Job description

Agency

Dept of Health and Human Services

Division

SEC OFFICE - INFO TECH

Job Classification Title

IT Security & Compliance Manager I (NS)

Position Number

60038023

Grade

DT11

About Us

The North Carolina Department of Health and Human Services (DHHS) is one of the largest, most complex agencies in the state, and has approximately 17,000 employees. It is responsible for ensuring the health, safety, and well-being of all North Carolinians, providing human service needs for special populations including individuals who are deaf, blind, developmentally disabled, and mentally ill, and helping poor North Carolinians achieve economic independence.

Description of Work

This position manages IT security staff and provides leadership for the department’s information security, risk management, compliance, and business continuity programs. Responsibilities include oversight of BCP, COOP, DR, and BIA programs; security policies and training; continuous security monitoring; HIPAA coverage determinations; and information security and application risk assessments.

The position provides strategic oversight of the department’s ServiceNow Integrated Risk Management (IRM) and Governance, Risk, and Compliance (GRC) programs, including risk assessments, policy and compliance management, audit management, risk remediation, and reporting. The position ensures security and compliance risks are identified, assessed, monitored, and addressed in accordance with federal, state, and departmental requirements.

The position serves as a primary liaison with federal and state agencies, auditors, and other oversight organizations; coordinates security reviews, audits, and corrective actions; and oversees IT security staff conducting compliance reviews of department divisions, offices, and county departments of social services. The position is responsible for developing staff, establishing priorities, managing resources, and strengthening the department’s overall security and compliance posture.

Knowledge Skills and Abilities/Management Preferences

Salary Grade Range: $91,600.00 - $160,299.00

Recruitment Range: $91,600.00 - $131,716.00

Candidates now meet the minimum qualifications of a position if they meet the minimum education and experience listed on the vacancy announcement.

The Knowledge, Skills, and Abilities (KSAs)/ Management Preferences are not required. Applicants who possess the following skills are preferred:

• Strategic Information Security and Risk Management – Ability to lead and oversee enterprise information security, privacy, risk management, governance, and compliance programs while aligning security strategies with organizational priorities.
• Regulatory Compliance – Knowledge of federal and state security, privacy, and regulatory requirements, with the ability to manage audits, reviews, assessments, corrective actions, and relationships with oversight agencies.
• Business Continuity and Enterprise Resilience – Ability to oversee BCP, COOP, DR, and BIA programs to ensure organizational preparedness, operational resilience, and effective recovery from disruptions.
• GRC and ServiceNow Leadership – Ability to strategically manage technology-enabled risk and compliance programs, including ServiceNow IRM/GRC, to improve risk visibility, compliance monitoring, reporting, and operational effectiveness.
• Leadership and Stakeholder Management – Ability to lead multidisciplinary staff, establish priorities, manage complex initiatives, and effectively communicate and collaborate with executive leadership, business units, technical teams, regulators, auditors, and external partners.

The Posting Will Close At 11:59 P.M. The Night Before The End Date

This Position Is Funded In Part Through Federal Funds

This Role Is Eligible To Be Hybrid And Requires Onsite Reporting Located Within Raleigh, NC

About the Office of the Secretary

The Office of the Secretary serves as the executive leadership arm of the North Carolina Department of Health and Human Services (NCDHHS), guiding the Department’s mission to improve the health, safety, and well-being of all North Carolinians. Through strategic oversight and collaborative leadership, the Secretary’s Office supports the effective coordination of over a dozen core divisions, ensuring that agency-wide priorities are aligned, resources are used responsibly, and services are delivered with equity and impact.

About the NCDHHS Information Technology Division

In collaboration with our partners, the North Carolina Department of Health and Human Services (DHHS) protects the health and safety of all North Carolinians and provides essential health and human services. The IT division (ITD) is one of the divisions that report to the Operational Excellence portfolio. The ITD division comprises four sections: Implementation and Operations, Strategy and Workforce, Enterprise Technology, and Vendor and Finance. ITD offers the following services but not limited to implementations, operations, project/portfolio management, infrastructure, consulting, business division liaison, digital transformation, IT strategy, enterprise technology, IT contract and vendor management, and data office services.

Compensation and Benefits

The State of North Carolina offers excellent comprehensive benefits. Employees can participate in health insurance options, standard and supplemental retirement plans, and the NCFlex program (numerous high-quality, low-cost benefits on a pre-tax basis). Employees also receive paid vacation, sick, and community service leave. In addition, paid parental leave is available to eligible employees. Visit website for State Benefits.

Supplemental Contact Information

The North Carolina Department of Health and Human Services (DHHS) is an Equal Opportunity Employer that embraces an Employment First philosophy, which consists of complying with all federal laws, state laws, and Executive Orders. We are committed to reviewing requests for reasonable accommodation at any time during the hiring process or while on the job. For more information about DHHS: https://www.ncdhhs.gov/.

DHHS uses the Merit-Based Recruitment and Selection Plan to fill positions subject to the State Human Resources Act with the most qualified individuals. Hiring salary will be based on relevant qualifications, internal equity, and budgetary considerations pertinent to the advertised position.

In accordance with the Governor’s Executive Order 303, our agency supports second‑chance employment for individuals who were previously incarcerated or justice-involved. We invite all potential applicants to apply for positions for which they may be qualified.

Degree/College Credit Verification

Degrees must be received from appropriately accredited institutions. Transcripts, degree evaluations, and cover letters may be uploaded with your application.

Veterans’ and National Guard Preference

• Applicants seeking Veteran’s Preference must attach aDD-214 Member-4 Form(Certificate of Release or Discharge from Active Duty) to their applications.
• Applicants seeking National Guard Preference must attach an NGB 23A (RPAS), along with the state application, if they are a current member of the NC National Guard in good standing.
• Applicants who are former members of either the NC Army National Guard or the NC Air National Guard, with honorable discharge and six years of creditable service, must attach a copy of the DD 256 or NGB 22, along with the state application.

ADA Accommodations

Consistent with the Americans with Disabilities Act (ADA) and the Pregnant Workers Fairness Act (PWFA), DHHS is committed to the full inclusion of all qualified individuals. As part of this commitment, DHHS will ensure that people with disabilities, or known limitations covered by the PWFA, are provided with reasonable accommodation. If reasonable accommodation is needed to participate in the job application or interview process, please contact the person indicated below.

CONTACT INFORMATION:

If there are any questions about this posting, please contact Talent Acquisition at [e-mail].

Minimum Education and Experience

Some state job postings say you can qualify by an “equivalent combination of education and experience.” If that language appears below, then you may qualify through EITHER years of education OR years of directly related experience, OR a combination of both. See the Education and Experience Equivalency Guide for details.

Bachelor’s degree in computerscience or a related IT field or closely related field from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area; or Associate degree in computerscience or a related IT field or closely related field from an appropriately accredited institution and three years of progressive experience in IT security or closely related area; or an equivalent combination of education and experience.

EEO Statement

The State of North Carolina is an Equal Employment Opportunity Employer and dedicated to providing employees with a work environment free from all forms of unlawful employment discrimination, harassment, or retaliation. The state provides reasonable accommodation to employees and applicants with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for religious beliefs, observances, and practices.