IT Security & Compliance Specialist II

State of North Carolina•1915 Health Services Way Wake, NC

4d•$87,617 - $120,474•Hybrid

About The Position

This position will have responsibility to consult in security related planning, management, monitoring and support multiple cloud infrastructures, including Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP), and Salesforce. It will also provide consulting services around the security design, deployment, maintenance, and troubleshooting of the department’s cloud solutions and infrastructure.

Requirements

Bachelor's degree in computer science or a related IT field or related degree from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area OR Associate degree in computer science or a related IT field or related degree from an appropriately accredited institution and three years of progressive experience in IT Security or closely related area OR An equivalent combination of education and experience.

Nice To Haves

Demonstrated expertise in cloud security engineering and architecture, including cloud-native security technologies, networking, compute, storage, databases, operating systems, virtualization, orchestration, multi-tenancy, elastic scalability, microservices, and serverless technologies.
Hands-on experience designing and implementing secure multi-cloud and hybrid-cloud solutions, with a focus on scalability, security, reliability, extensibility, manageability, and operational requirements.
Strong knowledge of security compliance and risk management, including PCI, SOX, SOC 2, ISO 27001, and NIST 800-53, with the ability to apply compliance requirements, assess risk, and evaluate short- and long-term business impacts in complex environments.
Experience configuring and tuning security tools and controls to maximize capabilities, minimize false positives, optimize resources, and support effective security operations.
Demonstrated ability to communicate complex technical and security concepts to non-technical audiences, translating technical risks, solutions, and recommendations into clear business-focused outcomes.

Responsibilities

Create detailed technical documentation to support cloud security across multiple environments.
Aid in developing privacy and security policies, procedures, and reference documents.
Serve as a subject matter expert to projects or solution teams by providing guidance on best practices related to information security.
Conduct security assessments and compliance checks on cloud solutions and environments.
Work with vendors and third-party service providers to ensure their services meet security requirements.
Participate in regular status meetings with IT leadership as well as other stakeholders regarding current projects and future initiatives cloud security posture.
Work to create a cloud-based security platform that monitors and analyzes data from multiple sources to identify potential threats.
Develop and implement a strategy for detecting anomalous behavior within machine learning cloud environments.