Public Service Manager II - Senior IT Control and Compliance Manager

If you are a current State of Maine employee, please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the State's career page and indicate on the application that they have previously worked for the State.

.

Office of Information Technology

* Anticipated Vacancy
- Opening Date:
March 24, 2026

Closing Date:
April 07, 2026

Grade/Admin Unit: 31 Confidential

Job Class Code: MH31

Salary: $82,184.95 - $*/Annually (
* includes 10% recruitment and retention stipend)

Position Number:

Location:

Augusta

Telework:
Available

This position is not eligible for visa sponsorship or STEM OPT extensions.

OVERVIEW:

Strengthen the control environment that protects the State of Maine. The Senior IT Control and Compliance Manager leads the regulatory compliance and information security control environment for the State of Maine. Reporting to the Senior Security Governance, Risk, and Compliance (GRC) Manager, this role directs the IT Compliance and Audit team and serves as a key contributor to the design, implementation, and continuous improvement of a comprehensive security control framework aligned with National Institute of Standards and Technology standards and applicable federal and state regulations.

This position blends cybersecurity, audit, governance, and process improvement expertise to ensure that State systems and data remain secure, compliant, and audit ready.

Hybrid Work Opportunity - This position has the potential to work from home up to 90% of the time with management approval.

WHAT YOU'LL DO:

No two days look the same in Information Security Office. Core responsibilities include:

Lead and Govern the Control Framework
- * Define, implement, and maintain a comprehensive IT security control framework, including information technology general controls, technical security controls, policies, and procedures.

* Align controls with National Institute of Standards and Technology frameworks and other applicable regulatory requirements.

* Mature and optimize control documentation, testing processes, and evidence management practices.

* Utilize RSA Archer as the centralized governance, risk, and compliance platform to document controls, risks, exceptions, and remediation activities.

Oversee Compliance and Regulatory Readiness
- * Serve as subject matter expert on federal and state regulatory requirements including Internal Revenue Service, Centers for Medicare and Medicaid Services, Social Security Administration, Department of Health and Human Services Office for Civil Rights, Federal Bureau of Investigation Criminal Justice Information Services, and other applicable authorities.

* Develop and maintain system security plans and required compliance documentation.

* Coordinate and facilitate internal and external audits.

* Provide audit support and ensure timely remediation of findings.

Manage Risk and Exceptions
- * Centrally document, track, and report risks, control gaps, and remediation plans using RSA Archer.

* Work directly with control and process owners to remediate deficiencies in a scalable and risk-balanced manner.

* Inventory and assess current-state processes, policies, and controls to identify improvement opportunities.

* Provide periodic reporting to executive leadership and stakeholders on compliance posture and risk trends.

Partner Across State Agencies
- * Collaborate with agencies to strengthen protection of sensitive data including Federal Tax Information, Affordable Care Act data, Social Security information, Criminal Justice Information, Payment Card Industry data, Health Information, and Personally Identifiable Information.

* Translate complex control requirements into clear, actionable guidance for technologists and business stakeholders.

* Promote consistent implementation of security standards across diverse agency environments.

Lead and Develop the Team
- * Supervise compliance and audit personnel.

* Establish clear performance expectations and professional development pathways.

* Build a culture of accountability, transparency, and continuous improvement within the compliance function.

WHY THIS ROLE…