Senior Information Security Compliance Lead

State of Colorado; Colorado; Remote; USD 120,000 - 170,000; Full time

Job summary

The State of Colorado's Information Security Office seeks a Senior Compliance Manager to lead the compliance program for public services and data. You will translate strategic priorities into practical roadmaps, drive audit readiness, and provide executive reporting across major frameworks including NIST, CJIS, HIPAA, and IRS 1075.

You will empower staff through clear expectations, coaching, balanced workloads, and fair accountability while collaborating with Risk Management, Directors of

Qualifications

• Leadership experience in compliance programs
• Ability to translate strategic priorities into practical roadmaps
• Experience coordinating audit readiness and evidence management
• Strong collaboration with risk management, IT, and legal teams

Responsibilities

• Establish one-on-one meetings, set priorities, provide coaching and feedback, and ensure fair accountability.
• Develop phased compliance roadmaps aligned with mission needs, risk, and capacity; translate plans into assignments and milestones, and justify resource trade-offs.
• Evolve audit intake, scope confirmation, evidence collection, quality review, submission, and follow-up; maintain an audit calendar and traceability to requirements.
• Coordinate with the Director of Technology, Risk Management, control owners, IT teams, and legal partners on compliance assessments and executive reporting.
• Maintain corrective-action plans with owners, milestones, and validation; identify root causes and escalate overdue actions.
• Review policies and procedures with accountable owners; pilot improvements and define workflow and evidence-automation needs with engineering and procurement partners.
• Maintain a dashboard and quarterly posture reviews to report on evidence quality, overdue actions, and roadmap progress.

Job description

The State of Colorado's Information Security Office seeks a Senior Compliance Manager to lead the compliance program for public services and data. You will translate strategic priorities into practical roadmaps, drive audit readiness, and provide executive reporting across major frameworks including NIST, CJIS, HIPAA, and IRS 1075.

You will empower staff through clear expectations, coaching, balanced workloads, and fair accountability while collaborating with Risk Management, Directors of