Security & Compliance Manager

Health & Human Services; North Carolina; Hybrid; USD 92,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Health & Human Services in Raleigh, NC seeks an IT Security & Compliance Manager I to lead enterprise security, risk management, and compliance programs for the department. The role oversees staff, policy development, and audit coordination across federal and state bodies, ensuring robust protection of critical systems and data.

The incumbent will manage BCP/DR initiatives, liaise with auditors, and drive improvements in the department’s security posture, reporting to the Office of the Secretary.

Qualifications

• Bachelor’s degree in computer science or a related IT field or closely related field.
• Two years of progressive IT security or related experience for the bachelor path; three years for the associate path.
• Experience leading enterprise information security, privacy, risk management, governance, and compliance programs.

Responsibilities

• Oversee BCP, COOP, DR, and BIA programs.
• Develop and enforce security policies and training.
• Monitor security continuously and manage risk assessments.
• Oversee HIPAA coverage determinations and regulatory reviews.
• Provide liaison with federal/state agencies, auditors, and oversight bodies.
• Lead and develop staff, allocate resources, and strengthen security posture.

Skills

Strategic information security

Risk management

Regulatory compliance

Business continuity

GRC leadership

Education

Bachelor’s degree in computer science or related IT field

Associate degree in computer science or related IT field

Tools

ServiceNow IRM/GRC

Job description

Agency Dept of Health and Human Services Division SEC OFFICE - INFO TECH Job Classification Title IT Security & Compliance Manager I (NS) Position Number 60038023 Grade DT11

About Us

The North Carolina Department of Health and Human Services (DHHS) is one of the largest, most complex agencies in the state, and has approximately 17,000 employees. It is responsible for ensuring the health, safety, and well-being of all North Carolinians, providing human service needs for special populations including individuals who are deaf, blind, developmentally disabled, and mentally ill, and helping poor North Carolinians achieve economic independence.

Description of Work

This position manages IT security staff and provides leadership for the department’s information security, risk management, compliance, and business continuity programs.

Responsibilities

• Oversight of BCP, COOP, DR, and BIA programs
• Security policies and training
• Continuous security monitoring
• HIPAA coverage determinations
• Information security and application risk assessments
• The position provides strategic oversight of the department’s ServiceNow Integrated Risk Management (IRM) and Governance, Risk, and Compliance (GRC) programs, including risk assessments, policy and compliance management, audit management, risk remediation, and reporting
• The position ensures security and compliance risks are identified, assessed, monitored, and addressed in accordance with federal, state, and departmental requirements
• The position serves as a primary liaison with federal and state agencies, auditors, and other oversight organizations; coordinates security reviews, audits, and corrective actions; and oversees IT security staff conducting compliance reviews of department divisions, offices, and county departments of social services
• The position is responsible for developing staff, establishing priorities, managing resources, and strengthening the department’s overall security and compliance posture

Knowledge, Skills, and Abilities / Management Preferences

Salary Grade Range: $91,600.00 - $160,299.00

Recruitment Range: $91,600.00 - $131,716.00

Candidates now meet the minimum qualifications of a position if they meet the minimum education and experience listed on the vacancy announcement. The Knowledge, Skills, and Abilities (KSAs)/ Management Preferences are not required. Applicants who possess the following skills are preferred:

• Strategic Information Security and Risk Management – Ability to lead and oversee enterprise information security, privacy, risk management, governance, and compliance programs while aligning security strategies with organizational priorities
• Regulatory Compliance – Knowledge of federal and state security, privacy, and regulatory requirements, with the ability to manage audits, reviews, assessments, corrective actions, and relationships with oversight agencies
• Business Continuity and Enterprise Resilience – Ability to oversee BCP, COOP, DR, and BIA programs to ensure organizational preparedness, operational resilience, and effective recovery from disruptions
• GRC and ServiceNow Leadership – Ability to strategically manage technology-enabled risk and compliance programs, including ServiceNow IRM/GRC, to improve risk visibility, compliance monitoring, reporting, and operational effectiveness
• Leadership and Stakeholder Management – Ability to lead multidisciplinary staff, establish priorities, manage complex initiatives, and effectively communicate and collaborate with executive leadership, business units, technical teams, regulators, auditors, and external partners

The Posting Will Close At 11:59 P.M.

This Position Is Funded In Part Through Federal Funds

This Role Is Eligible To Be Hybrid And Requires Onsite Reporting Located Within Raleigh, NC

About the Office of the Secretary

The Office of the Secretary serves as the executive leadership arm of the North Carolina Department of Health and Human Services (NCDHHS), guiding the Department’s mission to improve the health, safety, and well-being of all North Carolinians. Through strategic oversight and collaborative leadership, the Secretary’s Office supports the effective coordination of over a dozen core divisions, ensuring that agency-wide priorities are aligned, resources are used responsibly, and services are delivered with equity and impact.

About the NC DHHS Information Technology Division

In collaboration with our partners, the North Carolina Department of Health and Human Services (DHHS) protects the health and safety of all North Carolinians and provides essential health and human services. The IT division (ITD) is one of the divisions that report to the Operational Excellence portfolio. The ITD division comprises four sections: Implementation and Operations, Strategy and Workforce, Enterprise Technology, and Vendor and Finance.

ITD offers the following services but not limited to implementations, operations, project/portfolio management, infrastructure, consulting, business division liaison, digital transformation, IT strategy, enterprise technology, IT contract and vendor management, and data office services.

• implementations
• operations
• project/portfolio management
• infrastructure
• consulting
• business division liaison
• digital transformation
• IT strategy
• enterprise technology
• IT contract and vendor management
• data office services

Compensation and Benefits

The State of North Carolina offers excellent comprehensive benefits.

• Employees can participate in health insurance options, standard and supplemental retirement plans, and the NCFlex program (numerous high-quality, low-cost benefits on a pre-tax basis)
• Employees also receive paid vacation, sick, and community service leave
• In addition, paid parental leave is available to eligible employees

Visit website for State Benefits.

Equal Opportunity Employer Statements

We are an Equal Opportunity Employer that embraces an Employment First philosophy, which consists of complying with all federal laws, state laws, and Executive Orders.

We are committed to reviewing requests for reasonable accommodation at any time during the hiring process or while on the job.

The State of North Carolina is an Equal Employment Opportunity Employer and dedicated to providing employees with a work environment free from all forms of unlawful employment discrimination, harassment, or retaliation. The state provides reasonable accommodation to employees and applicants with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for religious beliefs, observances, and practices.

DHHS uses the Merit-Based Recruitment and Selection Plan to fill positions subject to the State Human Resources Act with the most qualified individuals.

Hiring salary will be based on relevant qualifications, internal equity, and budgetary considerations pertinent to the advertised position.

In accordance with the Governor’s Executive Order 303, our agency supports second-chance employment for individuals who were previously incarcerated or justice-involved.

Minimum Education and Experience

Some state job postings say you can qualify by an “equivalent combination of education and experience.” If that language appears below, then you may qualify through EITHER years of education OR years of directly related experience, OR a combination of both. See the Education and Experience Equivalency Guide for details.

Bachelor’s degree in computer science or a related IT field or closely related field from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area; or Associate degree in computer science or a related IT field or closely related field from an appropriately accredited institution and three years of progressive experience in IT security or closely related area; or an equivalent combination of education and experience.