Job Description

Posting number: 26-104

Department: State Law Enforcement Division (SLED)

Division: Information Technology & Security

Job classification: Risk Management & Compliance Analyst II

Posting type: Open

Categories: IT and Computers

About SLED
The South Carolina Law Enforcement Division (SLED) is a premier statewide law enforcement agency dedicated to serving and protecting the citizens of South Carolina. With a proud history rooted in integrity, professionalism, and public service, SLED is committed to providing high-quality investigative, intelligence, and forensic services to support law enforcement agencies across the state.

At SLED, we value dedication, ethical conduct, accountability, and a strong commitment to justice. Our agency plays a vital role in maintaining public safety and supporting criminal justice efforts at the local, state, and federal levels. From advanced forensic science to homeland security, criminal investigations, and criminal justice information systems, SLED's diverse responsibilities make it one of the most dynamic law enforcement agencies in the state.

We foster a professional work environment where teamwork, respect, and continuous improvement are fundamental. Our employees are held to the highest standards and are given opportunities to grow within a mission-driven organization that makes a meaningful difference in South Carolina communities.

Learn more about why you should join our team at www.sled.sc.gov

<span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span><span class="fr-mk" style="display: none;"> </span>

General Responsibility
Manage and coordinate professional work examining, evaluating, and/or monitoring conformity with laws, regulation, information security, privacy or other business standards. Supervise compliance activities as it relates to the CJIS, PCI, and CALEA conformity.

Specific Duties

• Plan, organize, and monitor regulatory enforcement activities to ensure that all applicable statues, regulations, industry standards are met. Provide reports and advise senior management on regulatory requirements and emerging risk. Support the maintenance of the information security framework by updating controls in conjunction with changes in the regulatory environment.
• Support risk management activities (e.g. risk assessments, gap analysis, business impact analysis) to identify current and future threats and help organization reach an acceptable level of risk. Monitor and report on the effectiveness of risk controls and make recommendations for improvement.
• Aid with the establishment and maintenance of the agency's information security program and associated strategies to support the business processes and overall goals of the organization. Enforce security requirements during the design, development, testing, and delivery of information systems.
• Assist with the classification of data based on its sensitivity level and ensure that data is properly managed and secured according to regulatory requirements and enterprise adopted standards. Identify and document data handling and storage requirements for each classification level. Monitor and audit data usage to ensure compliance with classification policies.
• Develop and deliver security awareness programs to educate employees on governance, risk, and compliance requirements and expectations for the organization. Monitor and report on the effectiveness of the security awareness programs and provide recommendations for improvements.

Examples of duties

• Bachelor's degree in a related field and three years relevant work experience.
  
• Moderate knowledge of system networks, diagrams, firewalls, routers, and other security devices.
• Knowledge of cyber security frameworks.
• Excellent communication, interpersonal, and leadership skills.
• Knowledge of governance, risk, and compliance (GRC) program management.
• Ability to act as liaison and effectively communicate information security topics (e.g., data constraints, information needs) to both technical and non-technical audiences throughout the state.
• Travel statewide, including overnight travel, will be required.

Qualifications

• CISA, CRISC, or CISM certifications are preferred.
  

Supplemental information

South Carolina Law Enforcement Division (SLED) is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions, including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.

SLED offers an exceptional benefits package for FTE positions that includes:

• Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• State Retirement Plan and Deferred Compensation Programs

Supplemental questions are considered part of the official application. Any misrepresentation of yourself may be grounds for disqualification.

Conditional selection based on candidate education, training, experience, oral interviews and clearance of background investigation.