Security Lead

Damco Solutions; North Carolina; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Damco Solutions is seeking a security and compliance leader to guide ERP selections and implementations for a North Carolina county. The role focuses on defining security criteria, risk assessments and collaboration with County Purchasing and technology teams; remote/hybrid options apply with travel as needed.

You will contribute to evaluation materials, assist with architecture, data migration, security testing plans and readiness for go-live through stabilization, targeting a go-live by June

Qualifications

• Experience defining security requirements for public sector ERP selections.
• Experience planning security testing on ERP implementations.
• Public sector ERP experience and go-live/stabilization success.
• Must be U.S.-based and willing to travel.

Responsibilities

• Define the security and compliance requirements for the ERP RFP's technical content, working with County Purchasing and the technology teams.
• Contribute security and compliance criteria to the evaluation, scoring and shortlisting materials, and assess vendor responses, demonstrations and references.
• Provide security input to the solution architecture, the integrations catalog and the API strategy.
• Provide security input to the data conversion and migration strategy for moving County data to the new ERP.
• Develop and approve security testing plans, and review results during end-to-end testing.
• Support security-related acceptance criteria in the SOW and contract review.
• Support security readiness for cutover/go-live and monitoring during stabilization.

Skills

ERP security

Public sector ERP

Security testing planning

Vendor-agnostic advisory

Willingness to travel

Education

Bachelor's degree in CS/IT or related

Job description

Ensures security and compliance requirements are defined, evaluated and tested across selection, design, implementation and go-live.

ENGAGEMENT OVERVIEW

Client is replacing and consolidating its ERP portfolio (Tyler Munis, Infor Lawson, OpenGov, UKG Kronos) across Finance, HCM and Budget, starting with HR/payroll and capital asset tracking and depreciation off Lawson HCM (go-live required by end of 2029).

LOCATION / WORK MODEL

U.S.-based only (no offshore). Remote/hybrid is acceptable for appropriate activities as long as deliverables and responsiveness meet County expectations. Onsite presence is set by the County for each project phase and activity. Must be willing to travel as needed throughout the engagement.

KEY RESPONSIBILITIES

• Define the security and compliance requirements for the ERP RFP's technical content, working with County Purchasing and the technology teams.
• Contribute security and compliance criteria to the evaluation, scoring and shortlisting materials, and assess vendor responses, demonstrations and references.
• Provide security input to the solution architecture, the integrations catalog and the API strategy.
• Provide security input to the data conversion and migration strategy for moving County data to the new ERP.
• Develop and approve security testing plans, and review results during end-to-end testing.
• Support security-related acceptance criteria in the SOW and contract review.
• Support security readiness for cutover/go-live and monitoring during stabilization.

REQUIRED QUALIFICATIONS

• Experience defining security and compliance requirements for public sector ERP selection and implementation.
• Experience planning and overseeing security testing on ERP implementations.
• Public sector ERP experience (weighted highest in the client's evaluation) and a record of go-live and stabilization success on past ERP projects.
• Vendor-agnostic advisory capability across multiple ERP vendor ecosystems. Must be U.S.-based and willing to travel. Minimum years of experience: TBD (the client sets none).

PREFERRED QUALIFICATIONS / CERTIFICATIONS

• Certifications related to security standards (e.g., ISO); the specific credential is TBD.
• Experience with North Carolina local governments, ideally a large county.
• Certifications: TBD (the client names no individual certifications). ERP vendor, cloud provider, security standards, ISO and CMMI credentials are a plus.

INDEPENDENCE REQUIREMENT (MUST-HAVE)

MUST-HAVE: The candidate must be independent of ERP software vendors and system integrators. Candidates must disclose any vendor reseller or investment relationships, or system integrator partnerships, that could influence recommendations.

DURATION

The contract term is an initial 3 years plus two optional 1-year renewals (up to 5 years); the tentative HCM program runs through stabilization (target June 2030). Proposal stage; depends on contract award.