Security Director (Governance, Risk & Compliance)

E-Logic, Inc.; Austin (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

E-logic, Inc. seeks an experienced Security Director to design, implement, and govern the cybersecurity program (GRC) for the State of Texas DIR STS SecOps contract.

The role ensures compliance with NIST, PCI-DSS, IRS 1075, CJIS, and HIPAA while guiding enterprise security architecture and risk remediation across public cloud and on-prem environments. The successful candidate will lead governance, risk, and compliance efforts, manage third-party assessments, and communicate effectively with DIR

Qualifications

• 10+ years of cybersecurity experience with GRC and enterprise security architecture.
• CISSP, CISM, CRISC, or CISA certification.
• Deep understanding of NIST SP 800-53 Rev. 5, 1 TAC Chapter 202, CJIS, IRS 1075, and NIST AI frameworks.
• Executive communication skills with experience managing public-sector stakeholders.

Responsibilities

• Serve as the primary point of contact for Governance, Risk, and Compliance (GRC) between E-logic, DIR, and vendor partners.
• Develop and maintain Master Security Baseline Configurations (MSBC) across public and private cloud environments.
• Oversee third-party security audits, biannual assessment reports, and SOC 2 Type II controls.
• Establish a security governance framework for Artificial Intelligence based on the NIST AI Risk Management Framework.
• Manage the security responsibility matrix and advise DIR clients on risk mitigation strategies.

Skills

GRC

Enterprise security architecture

Executive communication

Public-sector stakeholder management

Education

CISSP/CISM/CRISC/CISA certifications

Job description

E-logic is seeking an experienced Security Director responsible for the design, implementation, and governance of the cybersecurity program (GRC) for State of Texas - Department of Information Resources (DIR) Shared Technology Services (STS) SecOps contract. This role ensures that the DIR ecosystem complies with state and federal mandates, including 1 TAC 202, NIST SP 800-53, PCI-DSS, IRS 1075, CJIS, and HIPAA.

Key Responsibilities

• Serve as the primary point of contact for Governance, Risk, and Compliance (GRC) between E-logic, DIR, and vendor partners.
• Develop and maintain Master Security Baseline Configurations (MSBC) across public and private cloud environments.
• Oversee third-party security audits, biannual assessment reports, and SOC 2 Type II controls.
• Establish a security governance framework for Artificial Intelligence based on the NIST AI Risk Management Framework.
• Manage the security responsibility matrix and advise DIR clients on risk mitigation strategies.

Qualifications & Requirements

• 10+ years of cybersecurity experience with a focus on GRC and enterprise security architecture.
• CISSP, CISM, CRISC, or CISA.
• Deep understanding of NIST SP 800-53 Rev. 5, 1 TAC Chapter 202, CJIS, IRS 1075, and NIST AI frameworks.
• Exceptional executive communication skills with demonstrated experience managing public-sector stakeholders.

Important Notice

This role is part of a proposal for State of Texas - Department of Information Resources (DIR) Shared Technology Services (STS) SecOps. Hiring is contingent upon the selection of the consultant. Selected candidates will be included in the proposal and must authorize the use of their resume for submission.