Public Service Manager II - Senior IT Control and Compliance Manager

State of Maine•Augusta, ME

11d•$82,185 - $116,391•Hybrid

About The Position

Strengthen the control environment that protects the State of Maine. The Senior IT Control and Compliance Manager leads the regulatory compliance and information security control environment for the State of Maine. Reporting to the Senior Security Governance, Risk, and Compliance (GRC) Manager, this role directs the IT Compliance and Audit team and serves as a key contributor to the design, implementation, and continuous improvement of a comprehensive security control framework aligned with National Institute of Standards and Technology standards and applicable federal and state regulations. This position blends cybersecurity, audit, governance, and process improvement expertise to ensure that State systems and data remain secure, compliant, and audit ready. Hybrid Work Opportunity – This position has the potential to work from home up to 90% of the time with management approval.

Requirements

Bachelor’s degree in information technology, cybersecurity, audit, accounting, or related field, and
A minimum of 5 years of professional experience in information technology audit, internal audit, cybersecurity compliance, or related security roles, including supervisory or team leadership experience.

Nice To Haves

Demonstrated leadership experience overseeing compliance, audit, or control validation teams
Direct experience managing or coordinating federal regulatory audits within a complex, multi-agency environment
Hands-on experience configuring, administering, or optimizing RSA Archer or similar governance, risk, and compliance platforms
Professional certifications such as Certified Information Systems Auditor, Certified Information Systems Security Professional, Certified in Risk and Information Systems Control, Certified Information Security Manager, or comparable credentials
Enterprise Risk Perspective- Ability to evaluate control effectiveness within broader organizational risk strategy and enterprise priorities.
Operational Integration- Skill in embedding compliance requirements into daily operational processes rather than treating compliance as a standalone activity.
Executive Reporting and Transparency- Capability to produce clear, decision-ready reporting for senior leadership and oversight bodies.
Process Modernization- Experience improving audit workflows, evidence management, and control testing efficiency.
Influence and Stakeholder Engagement- Ability to build consensus among technical teams, agency leadership, auditors, and legal stakeholders.
Strategic Discipline- Strong prioritization and resource alignment skills in a regulated, resource-constrained environment.

Responsibilities

Lead and Govern the Control Framework Define, implement, and maintain a comprehensive IT security control framework, including information technology general controls, technical security controls, policies, and procedures. Align controls with National Institute of Standards and Technology frameworks and other applicable regulatory requirements. Mature and optimize control documentation, testing processes, and evidence management practices. Utilize RSA Archer as the centralized governance, risk, and compliance platform to document controls, risks, exceptions, and remediation activities.
Oversee Compliance and Regulatory Readiness Serve as subject matter expert on federal and state regulatory requirements including Internal Revenue Service, Centers for Medicare and Medicaid Services, Social Security Administration, Department of Health and Human Services Office for Civil Rights, Federal Bureau of Investigation Criminal Justice Information Services, and other applicable authorities. Develop and maintain system security plans and required compliance documentation. Coordinate and facilitate internal and external audits. Provide audit support and ensure timely remediation of findings.
Manage Risk and Exceptions Centrally document, track, and report risks, control gaps, and remediation plans using RSA Archer. Work directly with control and process owners to remediate deficiencies in a scalable and risk-balanced manner. Inventory and assess current-state processes, policies, and controls to identify improvement opportunities. Provide periodic reporting to executive leadership and stakeholders on compliance posture and risk trends.
Partner Across State Agencies Collaborate with agencies to strengthen protection of sensitive data including Federal Tax Information, Affordable Care Act data, Social Security information, Criminal Justice Information, Payment Card Industry data, Health Information, and Personally Identifiable Information. Translate complex control requirements into clear, actionable guidance for technologists and business stakeholders. Promote consistent implementation of security standards across diverse agency environments.
Lead and Develop the Team Supervise compliance and audit personnel. Establish clear performance expectations and professional development pathways. Build a culture of accountability, transparency, and continuous improvement within the compliance function.

Benefits

Work-Life Balance – Rest is essential. Take time for yourself using 13 paid holidays, 12 days of sick leave, and 3+ weeks of vacation leave annually. Vacation leave accrual increases with years of service, and overtime-exempt employees receive personal leave.
Health Insurance Coverage – The State of Maine pays 85%-100% of employee-only premiums ($11,857.68-$13,950.24 annual value), depending on salary. Use this chart to find the premium costs for you and your family, including the percentage of dependent coverage paid by the State.
Health Insurance Premium Credit – Participation decreases employee-only premiums by 5%. Visit the Office of Employee Health and Wellness for more information about program requirements.
Dental Insurance – The State of Maine pays 100% of employee-only dental premiums ($365.28 annual value).
Retirement Plan – The State of Maine contributes 18.91% of pay to the Maine Public Employees Retirement System (MainePERS), on behalf of the employee.
Gym Membership Reimbursement – Improve overall health with regular exercise and receive up to $40 per month to offset this expense.
Health and Dependent Care Flexible Spending Accounts – Set aside money pre-tax to help pay for out-of-pocket health care expenses and/or daycare expenses.
Public Service Student Loan Forgiveness – The State of Maine is a qualified employer for this federal program. For more information, visit the Federal Student Aid office.
Living Resources Program – Navigate challenging work and life situations with our employee assistance program.
Parental leave is one of the most important benefits for any working parent. All employees who are welcoming a child—including fathers and adoptive parents—receive forty-two (42) consecutive calendar days of fully paid parental leave. Additional, unpaid leave may also be available, under the Family and Medical Leave Act.
Voluntary Deferred Compensation – Save additional pre-tax funds for retirement in a MaineSaves 457(b) account through payroll deductions.
State employees are eligible for an extensive and highly competitive benefits package, covering many aspects of wellness. Learn about additional wellness benefits for State employees from the Office of Employee Health and Wellness.