Job Description

Posting number: 191789

Department: Department of Social Services

Division: Office of Inspector General

Job classification: IT Security Administrator

Posting type: Open

Categories: IT and Computers, Risk Management, Program Management

<span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span>

Do you have a passion to provide meaningful work in the community? Would you like to be part of an organization whose central mission is helping to protect, stabilize and strengthen the lives of children, families, and vulnerable adults? Then the South Carolina Department of Social Services has the right job opportunity for you.

Job Duties:

• The Compliance Analyst analyzes and evaluates the Agency’s information security processes and makes formal recommendations, where appropriate, to improve security, reduce risk, increase efficiency, and achieve cost savings. Responsible for supporting the enforcement of Agency security policies and standards and ensuring applicable IT risk and compliance requirements are met. Works with users, management, and technical teams to identify, assess, measure, and report information security risks through reviews of security controls, processes, and practices. They serve as the primary coordinator for IT-related audits and assessments, including those conducted by the FBI, IRS, SSA, DOA DIS, and other entities, and works with diverse stakeholders to maintain required documentation and develop remediation plans arising from audit or assessment findings. This position manages the Agency’s Cyber Risk Register, assists in developing risk treatment and remediation strategies, maintains required governance, risk, and compliance reporting, and contributes to the Agency’s security awareness program.

• Serves as the primary liaison for all IT-related audits, including but not limited to external (e.g., FBI, IRS, SSA, DOA DIS) and internal audits, coordinating effectively with all involved parties to ensure comprehensive compliance.

• Analyzes, develops, and implements comprehensive security policies, standards, and training programs, aligning them with the Agency’s objectives for enhanced security, cost-effectiveness, and operational efficiency.

• Oversees and refines the Change Management process, ensuring rigorous documentation, reviews, and approvals of IT changes in accordance with established policies, thereby maintaining system integrity and compliance.

• Leads the collaboration with various client groups for the development and updates of IT control matrices, ensuring they are accurately tailored and kept current to meet the Agency’s unique needs.

• Conducts and oversees the annual Security Control reviews, collaborating with the CISO, relevant managers, and internal audit teams to validate and endorse the security measures in place.

• Engages with stakeholders and subject matter experts to drive the creation and continuous improvement of essential documentation (e.g., Standards, Configuration Manuals, Process Manuals) particularly in response to audit outcomes or compliance requirements.

• Manages and continuously enhance the Cyber Risk register, collaborating with relevant teams to identify, assess, and formulate effective remediation or mitigation strategies for identified risks.

• Contributes significant insights and expertise to the Agency’s information security awareness program, ensuring it remains robust, engaging, and educative for all personnel.

• Serves as the Agency’s primary point of contact for the South Carolina Department of Administration, Division of Information Security (DOA DIS), for cybersecurity governance, risk, and compliance reporting. Maintains accurate and current information regarding the Agency’s security posture within DIS GRC platforms, assessments, surveys, and other reporting mechanisms, coordinating with Agency stakeholders to validate submissions and addresses identified gaps or required remediation.

• Other duties as assigned.

Examples of duties

A Bachelor's Degree or higher in Information Technology Systems, Computer Science, or a related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.

Supplemental information

This application for employment with the SC Department of Social Services must be completed in its entirety. A resume may be included; but shall not be substituted in lieu of the completion of this application in part or in whole. "See Resume" is not acceptable information for the completion of any part of the requirements of this application. If such is submitted, this employment application will be considered incomplete and may not be forwarded as eligible for consideration to hiring managers.

Must possess a valid driver's license and have access to and be able to operate a motor vehicle. Individuals must comply with necessary field work assignments.

If you certify, by completion and submission of this application, that you possess educational credentials that qualify you for the available DSS positions, you will be required to provide a certified official transcript, if you are selected for job offer.

The South Carolina Department of Social Services offers an exceptional benefits package that includes:

• Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• State Retirement Plan and Deferred Compensation Programs

DIVISION: Information Security / Richland County