Risk Management & Compliance Manager I

Job Responsibilities

About Information Technology In The Administration Division

Under the general supervision of the IT Director, serves as the Risk Management & Compliance Manager for the Information Technology section. Conducts risk management activities to identify current and future threats and to help the organization reach an acceptable level of risk.

• Provides the necessary subject-matter expertise and ensures implementation of the information security architecture, risk management standards, gap analysis, best practices, and systems/processes to ensure information privacy/protection. Will interact with management to determine acceptable levels of risk as the business model and risk profile change and align the security program accordingly.
• Review the security features of new information security practices, systems, and business services to ensure they meet the security requirements of new and existing policies.
• Review, on a timely basis, the various analyses of reports and logs obtained from firewalls, external and internal scanning devices, and security software. Reviews for noted irregularities, reports violations, and recommends solutions.
• Work with IT staff and outside vendors to determine the effectiveness and security of agency resources. Assist in the development of scenarios of usage, test for abnormalities or exposures. Use available tools to determine the effectiveness of Security and Risk programs and if guidelines and policies are being followed.
• Completes the Position Description process for all assigned employees.
• Assist in all areas of Information Technology as requested by the IT Director or Director of Administration.

This Position Also Includes An Excellent Benefits Package

• Public Service Loan Forgiveness eligibility.
• Paid parental leave.
• Health, dental, vision, long-term disability, and life insurance for employees, spouses, and children.
• Fifteen days of annual (vacation) leave per year.
• Fifteen days of sick leave per year.
• Thirteen paid holidays each year.
• State Retirement Plan and Deferred Compensation Programs.

Minimum And Additional Requirements

Bachelor’s degree in computer science, business, or related discipline. FIve years of experience in Information Technology, of which at least three years were in the information security field.

Additional Requirements

• Position may require employees to work evenings and weekends.
• Position may be required to report to work during emergency situations.

Preferred Qualifications

• Experience using Microsoft Defender or a similar XDR Solution.
• Knowledge of applicable internal and/or external regulatory policies, standards, procedures, and controls. Knowledge of governance, risk and compliance (GRC) program management.
• Understanding of risk assessment process, monitoring, and reporting.
• Ability to apply information security principles to business solutions.
• Ability to act as liaison and effectively communicate information security topics (e.g., data constraints, information needs) to both technical and non-technical audiences at all levels of the organization.
• Knowledge of developing and managing an information security program, including its policies, standards, procedures, technologies, and controls.
• Knowledge in identifying and managing information security risks, threats, and incidents at an enterprise level.

Additional Comments

DRUG SCREENING, CREDIT CHECK, DELINQUENT TAX CHECK, SLED BACKGROUND CHECK, AND GRIEVANCE CHECK ARE REQUIRED.

THIS OFFICE IS AN EQUAL OPPORTUNITY AND AFFIRMATIVE ACTION EMPLOYER.

EEOP Utilization Report available upon request

We are committed to providing equal employment opportunities. If you have a limitation or disability that requires an accommodation during the application process, please let us know by emailing [email protected]

Benefits For State Employees

The state of South Carolina offers eligible employees generous benefits, including health and dental insurance; retirement and savings plan options; and paid vacation and sick leave. Plus, work-life balance programs such as telecommuting and flexible work schedules are available to employees of some state agencies.

Insurance Benefits

Eligible employees may enroll in health insurance, which includes prescription coverage and wellness benefits. Other available insurance benefits include dental, vision, term life insurance, long term disability and flexible spending accounts for health and child care expenses.

Retirement Benefits

State employees are also offered retirement plan options, including defined benefit and defined contribution plans. Additionally, eligible employees may elect to participate in the South Carolina Deferred Compensation Program, which is a voluntary, supplemental retirement savings plan offering 401(k) and 457 plan options.

Workplace Benefits

State employees may also be eligible for other benefits, including tuition assistance; holiday, annual and sick leave; and discounts on purchases, travel and more.

Note: The benefits above are available to most state employees, with the exception of those in temporary positions. Employees in temporary grant and time-limited positions may be eligible for all, some or none of these benefits as benefits are associated with each position type. For these positions, contact the hiring agency to determine what benefits may be available.

01

Are you willing to accept a salary between $66,400-$119,500?

02

What is your current salary?

03

Do you have a Bachelor's degree or higher?

• Yes
• No

04

If you have a bachelor degree or higher, please provide degree field and date of completion.

05

How many years of experience are directly related to working in the IT field?

• No experience
• Less than five years
• Five or more years

06

How many years of experience do you posses which are directly related to information security?

• No experience
• Less than three years
• Three or more years

07

Please briefly explain your experience in Information Technology, including your experience in Information Security. Note: "Failure to provide detailed and complete information may result in your application not being referred."

08

I acknowledge that I may be required to complete a SparkHire One-Way Virtual interview as part of the hiring process if the Hiring Manager desires an interview.

• Yes
• No

09

• Please read in its entirety* I acknowledge that a resume may be attached but not substituted for completing the employment application's salary, work history, education, and reference sections. Incomplete applications will not be accepted. Is your application complete?
• Yes
• No
• Required Question