Public Service Manager II - Senior Cybersecurity Governance, Risk, and Compliance; GRC Manager

If you are a current State of Maine employee, please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the State’s career page and indicate on the application that they have previously worked for the State.

Office of Information Technology

• Opening Date:
  February 12, 2026
• Closing Date:
  February 27, 2026
• Job Class Code: MK32
• Grade: 32 Confidential
• Salary: $ - $ / Annually (
  * Includes 30% recruitment and retention stipend)
• Position Number:
• Position Type:
  Full-Time
• Location:
  
  Augusta
• Telework:
  Available

As the Senior Cybersecurity GRC Manager, you’ll oversee Maine

IT’s Governance, Risk, and Compliance (GRC) program—ensuring that the State of Maine’s cybersecurity efforts align with compliance requirements, organizational goals, and risk tolerance. This is a unique opportunity to build and grow a foundational program that promotes a culture of security and compliance across the entire enterprise. You will lead the strategy that safeguards Maine’s most sensitive information. You will also lead a team of State employees and contracted professionals to develop policies, manage risks, ensure regulatory compliance, and promote enterprise-wide training and awareness.

Reporting directly to the Chief Information Security Officer (CISO), this role is vital to shaping the long‑term security posture of the State of Maine.

Hybrid Work Opportunity – This position has the potential to work from home as much as 90% of the time with management approval.

No two days look quite the same in Maine

IT’s Information Security Office. In general, you can expect to:

• Lead & Manage: Guide a cross‑functional team delivering key security governance, risk, and compliance services.
• Drive Policy & Compliance: Maintain frameworks, policies, and controls that align with legal and industry regulations and standards.
• Oversee
  
  Risk Management:
  
  Conduct and manage technical risk assessments to inform strategic decision‑making.
• Enable Resilience: Develop and test business continuity and incident response plans to keep services running during disruptions.
• Promote Awareness: Champion security education and a risk‑aware culture throughout State agencies.
• Collaborate Broadly: Work with all departments in state government to align security efforts with business needs.

As a cybersecurity professional you have a lot of options when it comes to your career. We get it. Here’s what makes our role stand out:

• Strategic Impact: Influence how cybersecurity is governed at the highest levels of State of Maine IT.
• Enterprise Reach: Collaborate with every department across Maine state government.
• Professional Growth: Work on meaningful, complex projects that challenge and expand your expertise.
• Public Service Mission: Help secure services that directly impact the lives of Maine’s citizens.
• Supportive Culture: Learn on the job, grow your skill set, and work with talented, mission‑driven peers.

If you are seeking a culture that supports growth, fosters success, and want to play a key role in maintaining the confidentiality, integrity, and availability of State of Maine data and systems, then Maine

IT is where you need to be! With the Maine

IT, Information Security Office can expect:

• One of the most generous hybrid work opportunities within Maine state government.
• A collaborative, fast‑paced environment that values innovation.
• Opportunities to make a real impact and drive meaningful change.
• Support for career development, on the job learning, and advancement.
• Competitive compensation, comprehensive benefits, and generous time off.

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• A minimum of 5 years of experience in cybersecurity or information security roles, with at least 3 of those years in a managerial or leadership role overseeing security architecture and strategy.
• Candidates must have advanced experience, education and/or seasoning in information security governance, risk management, and regulatory compliance.
• Demonstrated…