Senior Manager Information Security (Compliance) Remote From Anywhere In CO

State of Colorado; Colorado; Remoto; USD 120.000 - 170.000; Tempo integral

Resumo da vaga

The State of Colorado's Information Security Office seeks a Senior Compliance Manager to lead the compliance program for public services and data. You will translate strategic priorities into practical roadmaps, drive audit readiness, and provide executive reporting across major frameworks including NIST, CJIS, HIPAA, and IRS 1075.

You will empower staff through clear expectations, coaching, balanced workloads, and fair accountability while collaborating with Risk Management, Directors of

Qualificações

• Leadership experience in compliance programs
• Ability to translate strategic priorities into practical roadmaps
• Experience coordinating audit readiness and evidence management
• Strong collaboration with risk management, IT, and legal teams

Responsabilidades

• Establish one-on-one meetings, set priorities, provide coaching and feedback, and ensure fair accountability.
• Develop phased compliance roadmaps aligned with mission needs, risk, and capacity; translate plans into assignments and milestones, and justify resource trade-offs.
• Evolve audit intake, scope confirmation, evidence collection, quality review, submission, and follow-up; maintain an audit calendar and traceability to requirements.
• Coordinate with the Director of Technology, Risk Management, control owners, IT teams, and legal partners on compliance assessments and executive reporting.
• Maintain corrective-action plans with owners, milestones, and validation; identify root causes and escalate overdue actions.
• Review policies and procedures with accountable owners; pilot improvements and define workflow and evidence-automation needs with engineering and procurement partners.
• Maintain a dashboard and quarterly posture reviews to report on evidence quality, overdue actions, and roadmap progress.

Descrição da vaga

Senior Compliance Manager

Join the Information Security Office as our Senior Compliance Manager and empower a team dedicated to protecting Colorado's public services and data. In this role, you will lead the daily operations and ongoing development of our compliance program within the Information Security Office. Reporting to the leader responsible for Compliance and Risk, you will translate strategic priorities into practical roadmaps, repeatable audit processes, and measurable enhancements that safeguard state public services and constituent information.

As a people-centered leader, you will empower staff through clear expectations, regular coaching, balanced workloads, and fair accountability, ensuring processes remain resilient through staffing and leadership transitions. Working independently within delegated authority and collaborating closely with Risk Management, Directors of Technology, control owners, IT teams, and legal partners, you will direct compliance assessments, audit readiness, evidence management, management-response preparation, corrective-action tracking, and executive reporting across frameworks including the NIST Cybersecurity Framework, CJIS Security Policy, HIPAA, and IRS Publication 1075.

Essential Functions:

• Establish dependable one-on-one meetings, team priorities, and feedback. Assess strengths and development needs using work evidence and employee input. Provide coaching, training, cross-training, and clear procedures before drawing conclusions about performance. Address performance concerns consistently and respectfully, recognize contributions, and support constructive disagreement and early escalation.

Outcome - Staff understand their responsibilities, can obtain support, and demonstrate growing capability and reliable follow-through.

• Develop and recommend a phased compliance roadmap aligned with mission needs, obligations, risk, and capacity. Translate the approved plan into assignments and milestones. Develop staffing and budget proposals, manage approved resources, and explain trade-offs to the supervising leader.

Outcome - An achievable roadmap with owners, milestones, and resource needs.

• Evolve procedures for audit intake, scope confirmation, request tracking, evidence collection, quality review, submission, and follow-up. Maintain an audit calendar and request register. Define owners, deadlines, version control, and traceability to the requirement, system, and assessment period. Reuse evidence when valid and verify that it demonstrates the control being assessed.

Outcome - Timely, reliable submissions with less rework and duplication.

• Support the Director of Technology, I&S, who owns the formal Office of the State Auditor communications and coordinates executive testimony before the Legislative Audit Committee.
• Coordinate delegated logistics and evidence exchanges. Document auditor expectations and unresolved questions. Escalate disputes and threatened deadlines promptly. Distinguish internal validation from auditor’s assessment of implementation.

Outcome - Substantiated responses, status reporting, and appropriately authorized commitments.

• Maintain corrective-action plans with owners, milestones, dependencies, and validation requirements. Identify root causes, coordinate priorities with the Risk Manager and system and business owners. Report overdue actions and unresolved exposure; route exception and risk-acceptance recommendations to authorized decision makers.

Outcome - Sustainable fixes, supported completion claims, and visible unresolved exposure.

• Maintain a requirements inventory and review policies and procedures with accountable owners. Propose updates and support consistent with established CISPs and Technical Standards. Pilot improvements and revise when necessary using feedback. Define workflow and evidence-automation requirements with engineering, architecture, and procurement partners.

Outcome - Current, usable procedures and reliable improvements that reduce manual effort.

• Maintain a dashboard, regular leadership updates, quarterly posture reviews, and an annual assessment. Report evidence quality, overdue actions, recurring findings, workload, capability gaps, and roadmap progress. Distinguish documentation, implementation, tested effectiveness, and externally verified status.

Outcome - Clear progress, exposure, capacity, and decision reporting.

• Actively engage in improving leadership skills, attitudes, and knowledge, especially as related to equity, diversity, and inclusion. Attend training, development, and group training on topics of inclusive leadership.

A wide salary range is posted for this position and any job offer is based upon a salary analysis to comply with the Colorado Equal Pay