Public Service Manager II - Senior IT Control and Compliance Manager

Department of Administrative and Financial Services•Augusta, GA

39d•Hybrid

About The Position

This position leads the regulatory compliance and information security control environment for the State of Maine. It directs the IT Compliance and Audit team and serves as a key contributor to the design, implementation, and continuous improvement of a comprehensive security control framework aligned with National Institute of Standards and Technology standards and applicable federal and state regulations. This position blends cybersecurity, audit, governance, and process improvement expertise to ensure that State systems and data remain secure, compliant, and audit ready. This position has the potential to work from home up to 90% of the time with management approval.

Requirements

Bachelor’s degree in information technology, cybersecurity, audit, accounting, or related field
A minimum of 5 years of professional experience in information technology audit, internal audit, cybersecurity compliance, or related security roles, including supervisory or team leadership experience.

Nice To Haves

Demonstrated leadership experience overseeing compliance, audit, or control validation teams
Direct experience managing or coordinating federal regulatory audits within a complex, multi-agency environment
Hands-on experience configuring, administering, or optimizing RSA Archer or similar governance, risk, and compliance platforms
Professional certifications such as Certified Information Systems Auditor, Certified Information Systems Security Professional, Certified in Risk and Information Systems Control, Certified Information Security Manager, or comparable credentials
Enterprise Risk Perspective- Ability to evaluate control effectiveness within broader organizational risk strategy and enterprise priorities.
Operational Integration- Skill in embedding compliance requirements into daily operational processes rather than treating compliance as a standalone activity.
Executive Reporting and Transparency- Capability to produce clear, decision-ready reporting for senior leadership and oversight bodies.
Process Modernization- Experience improving audit workflows, evidence management, and control testing efficiency.
Influence and Stakeholder Engagement- Ability to build consensus among technical teams, agency leadership, auditors, and legal stakeholders.
Strategic Discipline- Strong prioritization and resource alignment skills in a regulated, resource-constrained environment.

Responsibilities

Define, implement, and maintain a comprehensive IT security control framework, including information technology general controls, technical security controls, policies, and procedures.
Align controls with National Institute of Standards and Technology frameworks and other applicable regulatory requirements.
Mature and optimize control documentation, testing processes, and evidence management practices.
Utilize RSA Archer as the centralized governance, risk, and compliance platform to document controls, risks, exceptions, and remediation activities.
Serve as subject matter expert on federal and state regulatory requirements including Internal Revenue Service, Centers for Medicare and Medicaid Services, Social Security Administration, Department of Health and Human Services Office for Civil Rights, Federal Bureau of Investigation Criminal Justice Information Services, and other applicable authorities.
Develop and maintain system security plans and required compliance documentation.
Coordinate and facilitate internal and external audits.
Provide audit support and ensure timely remediation of findings.
Centrally document, track, and report risks, control gaps, and remediation plans using RSA Archer.
Work directly with control and process owners to remediate deficiencies in a scalable and risk-balanced manner.
Inventory and assess current-state processes, policies, and controls to identify improvement opportunities.
Provide periodic reporting to executive leadership and stakeholders on compliance posture and risk trends.
Collaborate with agencies to strengthen protection of sensitive data including Federal Tax Information, Affordable Care Act data, Social Security information, Criminal Justice Information, Payment Card Industry data, Health Information, and Personally Identifiable Information.
Translate complex control requirements into clear, actionable guidance for technologists and business stakeholders.
Promote consistent implementation of security standards across diverse agency environments.
Supervise compliance and audit personnel.
Establish clear performance expectations and professional development pathways.
Build a culture of accountability, transparency, and continuous improvement within the compliance function.

Benefits

13 paid holidays
12 days of sick leave
3+ weeks of vacation leave annually
Health Insurance Coverage – The State of Maine pays 85%-100% of employee-only premiums
Health Insurance Premium Credit
Dental Insurance – The State of Maine pays 100% of employee-only dental premiums
Retirement Plan – The State of Maine contributes 18.91% of pay to the Maine Public Employees Retirement System (MainePERS), on behalf of the employee.
Gym Membership Reimbursement – up to $40 per month
Health and Dependent Care Flexible Spending Accounts
Public Service Student Loan Forgiveness
Living Resources Program – employee assistance program
Parental leave – forty-two (42) consecutive calendar days of fully paid parental leave for employees welcoming a child
Voluntary Deferred Compensation – MaineSaves 457(b) account