Compliance Analyst ​/ 61145320

Do you have a passion to provide meaningful work in the community? Would you like to be part of an organization whose central mission is helping to protect, stabilize and strengthen the lives of children, families, and vulnerable adults? Then the South Carolina Department of Social Services has the right job opportunity for you.

• The Compliance Analyst analyzes and evaluates the Agency’s information security processes and makes formal recommendations, where appropriate, to improve security, reduce risk, increase efficiency, and achieve cost savings. Responsible for supporting the enforcement of Agency security policies and standards and ensuring applicable IT risk and compliance requirements are met. Works with users, management, and technical teams to identify, assess, measure, and report information security risks through reviews of security controls, processes, and practices.
  
  They serve as the primary coordinator for IT-related audits and assessments, including those conducted by the FBI, IRS, SSA, DOA DIS, and other entities, and works with diverse stakeholders to maintain required documentation and develop remediation plans arising from audit or assessment findings. This position manages the Agency’s Cyber Risk Register, assists in developing risk treatment and remediation strategies, maintains required governance, risk, and compliance reporting, and contributes to the Agency’s security awareness program.
• Serves as the primary liaison for all IT-related audits, including but not limited to external (e.g., FBI, IRS, SSA, DOA DIS) and internal audits, coordinating effectively with all involved parties to ensure comprehensive compliance.
• Analyzes, develops, and implements comprehensive security policies, standards, and training programs, aligning them with the Agency’s objectives for enhanced security, cost-effectiveness, and operational efficiency.
• Oversees and refines the Change Management process, ensuring rigorous documentation, reviews, and approvals of IT changes in accordance with established policies, thereby maintaining system integrity and compliance.
• Leads the collaboration with various client groups for the development and updates of IT control matrices, ensuring they are accurately tailored and kept current to meet the Agency’s unique needs.
• Conducts and oversees the annual Security Control reviews, collaborating with the CISO, relevant managers, and internal audit teams to validate and endorse the security measures in place.
• Engages with stakeholders and subject matter experts to drive the creation and continuous improvement of essential documentation (e.g., Standards, Configuration Manuals, Process Manuals) particularly in response to audit outcomes or compliance requirements.
• Manages and continuously enhance the Cyber Risk register, collaborating with relevant teams to identify, assess, and formulate effective remediation or mitigation strategies for identified risks.
• Contributes significant insights and expertise to the Agency’s information security awareness program, ensuring it remains robust, engaging, and educative for all personnel.
• Serves as the Agency’s primary point of contact for the South Carolina Department of Administration, Division of Information Security (DOA DIS), for cybersecurity governance, risk, and compliance reporting. Maintains accurate and current information regarding the Agency’s security posture within DIS GRC platforms, assessments, surveys, and other reporting mechanisms, coordinating with Agency stakeholders to validate submissions and addresses identified gaps or required remediation.
• Other duties as assigned.

A Bachelor's Degree or higher in Information Technology Systems, Computer Science, or a related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.

Must possess a valid driver's license and have access to and be able to operate a motor vehicle. Individuals must comply with necessary field work assignments.

• Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children
• 15 days annual (vacation) leave per year
• 15 days sick leave per year
• 13 paid holidays
• Paid Parental Leave
• State Retirement Plan and Deferred Compensation Programs

DIVISION: Information Security / Richland County