Security & Compliance Manager

Agency Dept of Health and Human Services Division SEC OFFICE - INFO TECH

Job Classification

Title:

IT Security & Compliance Manager I (NS)

Position Number:

Grade: DT11

The North Carolina Department of Health and Human Services (DHHS) is one of the largest, most complex agencies in the state, and has approximately 17,000 employees. It is responsible for ensuring the health, safety, and well-being of all North Carolinians, providing human service needs for special populations including individuals who are deaf, blind, developmentally disabled, and mentally ill, and helping poor North Carolinians achieve economic independence.

This position manages IT security staff and provides leadership for the department's information security, risk management, compliance, and business continuity programs. Responsibilities include oversight of BCP, COOP, DR, and BIA programs; security policies and training; continuous security monitoring; HIPAA coverage determinations; and information security and application risk assessments.

The position provides strategic oversight of the department's Service Now Integrated Risk Management (IRM) and Governance, Risk, and Compliance (GRC) programs, including risk assessments, policy and compliance management, audit management, risk remediation, and reporting. The position ensures security and compliance risks are identified, assessed, monitored, and addressed in accordance with federal, state, and departmental requirements.

The position serves as a primary liaison with federal and state agencies, auditors, and other oversight organizations; coordinates security reviews, audits, and corrective actions; and oversees IT security staff conducting compliance reviews of department divisions, offices, and county departments of social services. The position is responsible for developing staff, establishing priorities, managing resources, and strengthening the department's overall security and compliance posture.

Salary Grade Range: $91,600.00 - $

Recruitment Range: $91,600.00 - $

Candidates now meet the minimum qualifications of a position if they meet the minimum education and experience listed on the vacancy announcement.

The Knowledge, Skills, and Abilities (KSAs)/ Management Preferences are not required. Applicants who possess the following skills are preferred:

• Strategic Information Security and Risk Management
  - Ability to lead and oversee enterprise information security, privacy, risk management, governance, and compliance programs while aligning security strategies with organizational priorities.
• Regulatory Compliance
  - Knowledge of federal and state security, privacy, and regulatory requirements, with the ability to manage audits, reviews, assessments, corrective actions, and relationships with oversight agencies.
• Business Continuity and Enterprise Resilience
  - Ability to oversee BCP, COOP, DR, and BIA programs to ensure organizational preparedness, operational resilience, and effective recovery from disruptions.
• GRC and Service Now Leadership
  - Ability to strategically manage technology-enabled risk and compliance programs, including Service Now IRM/GRC, to improve risk visibility, compliance monitoring, reporting, and operational effectiveness.
• Leadership and Stakeholder Management
  - Ability to lead multidisciplinary staff, establish priorities, manage complex initiatives, and effectively communicate and collaborate with executive leadership, business units, technical teams, regulators, auditors, and external partners.

The Posting Will Close At 11:59 P.M. The Night Before The End Date

This Position Is Funded In Part Through Federal Funds

This Role Is Eligible To Be Hybrid And Requires Onsite Reporting Located Within Raleigh, NC

The Office of the Secretary serves as the executive leadership arm of the North Carolina Department of Health and Human Services (NCDHHS), guiding the Department's mission to improve the health, safety, and well-being of all North Carolinians. Through strategic oversight and collaborative leadership, the Secretary's Office supports the effective coordination of over a dozen core divisions, ensuring that agency-wide priorities are aligned, resources are used responsibly, and services are delivered with equity and impact.

In collaboration with our partners, the North Carolina Department of Health and Human Services (DHHS) protects the health and safety of all North Carolinians and provides essential health and human services. The IT division (ITD) is one of the divisions that report to the Operational Excellence portfolio. The ITD division comprises four sections:
Implementation and Operations, Strategy and Workforce, Enterprise Technology, and Vendor and Finance. ITD offers the following services but not limited to implementations, operations, project/portfolio