Security Director (Governance, Risk & Compliance)

E-Logic, Inc.; Austin (TX); Vor Ort; USD 140.000 - 210.000; Vollzeit

Zusammenfassung

E-logic, Inc. seeks an experienced Security Director to design, implement, and govern the cybersecurity program (GRC) for the State of Texas DIR STS SecOps contract.

The role ensures compliance with NIST, PCI-DSS, IRS 1075, CJIS, and HIPAA while guiding enterprise security architecture and risk remediation across public cloud and on-prem environments. The successful candidate will lead governance, risk, and compliance efforts, manage third-party assessments, and communicate effectively with DIR

Qualifikationen

• 10+ years of cybersecurity experience with GRC and enterprise security architecture.
• CISSP, CISM, CRISC, or CISA certification.
• Deep understanding of NIST SP 800-53 Rev. 5, 1 TAC Chapter 202, CJIS, IRS 1075, and NIST AI frameworks.
• Executive communication skills with experience managing public-sector stakeholders.

Aufgaben

• Serve as the primary point of contact for Governance, Risk, and Compliance (GRC) between E-logic, DIR, and vendor partners.
• Develop and maintain Master Security Baseline Configurations (MSBC) across public and private cloud environments.
• Oversee third-party security audits, biannual assessment reports, and SOC 2 Type II controls.
• Establish a security governance framework for Artificial Intelligence based on the NIST AI Risk Management Framework.
• Manage the security responsibility matrix and advise DIR clients on risk mitigation strategies.

Kenntnisse

GRC

Enterprise security architecture

Executive communication

Public-sector stakeholder management

Ausbildung

CISSP/CISM/CRISC/CISA certifications

Jobbeschreibung

E-logic is seeking an experienced Security Director responsible for the design, implementation, and governance of the cybersecurity program (GRC) for State of Texas - Department of Information Resources (DIR) Shared Technology Services (STS) SecOps contract. This role ensures that the DIR ecosystem complies with state and federal mandates, including 1 TAC 202, NIST SP 800-53, PCI-DSS, IRS 1075, CJIS, and HIPAA.

Key Responsibilities

• Serve as the primary point of contact for Governance, Risk, and Compliance (GRC) between E-logic, DIR, and vendor partners.
• Develop and maintain Master Security Baseline Configurations (MSBC) across public and private cloud environments.
• Oversee third-party security audits, biannual assessment reports, and SOC 2 Type II controls.
• Establish a security governance framework for Artificial Intelligence based on the NIST AI Risk Management Framework.
• Manage the security responsibility matrix and advise DIR clients on risk mitigation strategies.

Qualifications & Requirements

• 10+ years of cybersecurity experience with a focus on GRC and enterprise security architecture.
• CISSP, CISM, CRISC, or CISA.
• Deep understanding of NIST SP 800-53 Rev. 5, 1 TAC Chapter 202, CJIS, IRS 1075, and NIST AI frameworks.
• Exceptional executive communication skills with demonstrated experience managing public-sector stakeholders.

Important Notice

This role is part of a proposal for State of Texas - Department of Information Resources (DIR) Shared Technology Services (STS) SecOps. Hiring is contingent upon the selection of the consultant. Selected candidates will be included in the proposal and must authorize the use of their resume for submission.