Job Description

Posting number: 191756

Department: Department of Administration

Division: Division of Information Security

Job classification: Risk Management & Compliance Manager II

Posting type: Open

Categories: IT and Computers, Risk Management

The Department of Administration's (Admin) Division of Information Security (DIS) is seeking a Risk Analyst and Compliance Manger II to join our top performing team! DIS is responsible for establishing statewide policies, standards, programs, and services related to cybersecurity and information systems. This position will discover cyber risks, interpret applicable policies, document cyber risks, communicate with agencies regarding cyber risk and mitigation strategies, train/guide junior analysts, and help to develop and mature the cyber risk program. If you are a forward-thinking security leader with an actionable mind set and want to make a difference, join us in our effort to protect South Carolina.

This position is onsite in beautiful Columbia, South Carolina.

Responsibilities of the Risk Management & Compliance Manager II:

• Assist the Director of Risk Management and Compliance with the development of the cyber risk program including program documentation, policies, and procedures.
• Assist with the development of cyber risk profiles for state agencies.
• Maintain documentation of cyber risks, mitigation strategies, risk acceptances, and other risk/compliance information into a governance, risk, and compliance system.
• Assist with the development of program metrics. Develop and create reports as requested.
• Communicate with agencies to collect risk information and assist the agencies with resources to mitigate or manage risk.
• Assist the Director of Risk Management and Compliance with establishing and managing communication plans.
• Work with and train junior risk analysts and other team members within the Risk Management and Compliance team.
• Other duties as assigned. This is an essential position as it may require operational support of the incumbent, as a member of the DIS leadership team.

Examples of duties

A bachelor's degree in computer science or related field and at least four (4) years of experience in information security. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.

• Candidate must be eligible to obtain and retain a Secret or higher security clearance from appropriate federal authorities.

Additional Requirements

• Excellent written and verbal communication skills and the ability to communicate cyber security concepts to a broad range of technical and non-technical audiences.
• Ability to foster participation and work cooperatively with agencies, state executives, and staff.
• Expert understanding of information security and privacy regulations, frameworks, requirements, and best practices.

Applicants indicating college credit or degree(s) on the application will be required to bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require an official, certified copy of the transcript prior to hiring or within a specific timeframe required by that area, after hiring. Failure to produce an official, certified transcript may result in not being hired or termination.

Qualifications

Supplemental information

The Department of Administration is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.

Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position.

The South Carolina Department of Administration offers an exceptional benefits package for full time (FTE) employees:

• Health, dental, vision, long-term disability, and life insurance for employees, spouse, and children. Click herefor additional information.
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• S.C. Deferred Compensation Program available(S.C. Deferred Compensation)
• Retirement benefit choices *
  • State Retirement Plan (SCRS)
  • State Optional Retirement Program (State ORP)

*Enrollment in one of the listed plans is required for all FTE employees; please refer to the contribution section of hyperlinked retirement sites for the current contribution rate of gross pay.