Security & Compliance Manager

State of North Carolina•1915 Health ServicesWay Wake, NC

8d•$91,600 - $131,716•Hybrid

About The Position

This position manages IT security staff and provides leadership for the department’s information security, risk management, compliance, and business continuity programs. It oversees BCP, COOP, DR, and BIA programs; security policies and training; continuous security monitoring; HIPAA coverage determinations; and information security and application risk assessments. The position provides strategic oversight of the department’s ServiceNow Integrated Risk Management (IRM) and Governance, Risk, and Compliance (GRC) programs, including risk assessments, policy and compliance management, audit management, risk remediation, and reporting. It ensures security and compliance risks are identified, assessed, monitored, and addressed in accordance with federal, state, and departmental requirements. The position serves as a primary liaison with federal and state agencies, auditors, and other oversight organizations; coordinates security reviews, audits, and corrective actions; and oversees IT security staff conducting compliance reviews of department divisions, offices, and county departments of social services. It develops staff, establishes priorities, manages resources, and strengthens the department’s overall security and compliance posture.

Requirements

Bachelor’s degree in computer science, a related IT field, or a closely related field from an appropriately accredited institution and two years of progressive experience in IT security or a closely related area; or an associate degree in computer science, a related IT field, or a closely related field from an appropriately accredited institution and three years of progressive experience in IT security or a closely related area; or an equivalent combination of education and experience.

Nice To Haves

Ability to lead and oversee enterprise information security, privacy, risk management, governance, and compliance programs while aligning security strategies with organizational priorities.
Knowledge of federal and state security, privacy, and regulatory requirements, with ability to manage audits, reviews, assessments, corrective actions, and relationships with oversight agencies.
Ability to oversee BCP, COOP, DR, and BIA programs to ensure preparedness, operational resilience, and recovery from disruptions.
Ability to strategically manage technology-enabled risk and compliance programs, including ServiceNow IRM/GRC, to improve risk visibility, compliance monitoring, reporting, and operational effectiveness.
Ability to lead multidisciplinary staff, establish priorities, manage complex initiatives, and communicate and collaborate with executive leadership, business units, technical teams, regulators, auditors, and external partners.

Responsibilities

Manage IT security staff and provide leadership for information security, risk management, compliance, and business continuity programs.
Oversee BCP, COOP, DR, and BIA programs.
Oversee security policies and training, continuous security monitoring, HIPAA coverage determinations, and information security and application risk assessments.
Provide strategic oversight of ServiceNow IRM and GRC programs, including risk assessments, policy and compliance management, audit management, risk remediation, and reporting.
Ensure security and compliance risks are identified, assessed, monitored, and addressed in accordance with federal, state, and departmental requirements.
Serve as a primary liaison with federal and state agencies, auditors, and other oversight organizations.
Coordinate security reviews, audits, and corrective actions.
Oversee IT security staff conducting compliance reviews of department divisions, offices, and county departments of social services.
Develop staff, establish priorities, manage resources, and strengthen the department’s security and compliance posture.