INFORMATION SECURITY GOVERNANCE, RISK, AND COMPLIANCE SUPERVISOR - 71000521

State of Florida • Tallahassee, FL

11d

About The Position

The Information Security Governance, Risk, and Compliance Supervisor supports and administers the Florida Department of Law Enforcement’s information security program and supervises the governance, risk, and compliance team. The supervisor communicates with, motivates, trains, and evaluates team members, and plans and directs their work. The role manages information security programs and measures related to agency data and information technology resources, and leads audits to identify cybersecurity gaps and establish improvement plans. It supports the FDLE CISO and ISM in their daily efforts to improve the information security program.

Requirements

• At least three years of experience in technical auditing, information security, or governance, risk, and compliance.
• Knowledge of operating systems and/or telecommunications concepts.
• Knowledge and experience with information security tools, services, and systems used to support an organizational information security program.
• Knowledge of operating systems as they relate to computer security and auditing.
• Ability to develop, test, and evaluate security controls.
• Knowledge of O365 security applications.
• Knowledge and experience with policy design and drafting.
• Knowledge of state and national security requirements, such as the NIST CSF framework and FAC 60-GG.
• Knowledge of data protection methodologies.
• Knowledge and experience with audit processes and procedures.

Responsibilities

• Develop plans, tasks, and project schedules, and coordinate work with other ITS sections to complete goals and tasks in the agency strategic operational plan.
• Prepare written reports and analyses of information security laws, rules, legislation, policies, and guidelines.
• Present findings and recommendations to the CIO, CISO, ITS managers, and agency leadership.
• Develop and maintain FDLE information security policies, standards, and procedures.
• Work with the CISO, CIO, and ISM to measure compliance with cybersecurity regulatory frameworks.
• Perform audits to identify security compliance gaps and serve as the point of contact for audits of the FDLE information security program.
• Design security-awareness training to educate staff on compliance and best practices.
• Act as a liaison between technical and non-technical staff during evaluation and procurement of new SaaS or cloud solutions for agency use.
• Ensure enterprise and SaaS vendors adhere to baseline security requirements.
• Communicate key performance indicators and risk metrics to FDLE leadership.
• Supervise, train, motivate, and evaluate GRC team members, and plan and direct their work.

Benefits

• State of Florida Tuition Waiver Program
• Paid holidays, vacation, and sick leave
• HMO and PPO health insurance options, with premiums starting as low as $50 per month
• $25,000 in automatic life insurance coverage
• Supplemental insurance options, including dental, vision, and disability insurance
• Paid maternity leave and parental leave following the birth or adoption of a child
• Pension and investment retirement plan options
• Tax-deferred medical and child care reimbursement accounts
• Opportunities for professional growth through training, team building, and mentoring

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed