Information Governance & Compliance Specialist

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

2 days ago Requisition

Salary Range: $ To $ Annually

Job Requisition:
Information Governance & Compliance Specialist

Job Title: Information Governance & Compliance Specialist

Department: Compliance & IT Governance

Reports To: CISO

Employment Type: Full-Time

Position Summary

The Information Governance & Compliance Specialist at Net
56 is responsible for developing, maintaining, and auditing data governance, regulatory compliance, and risk management frameworks for our K-12 school district clients and internal operations. This role ensures that client data environments adhere to state, federal, state and educational compliance standards while implementing structured operational governance policies.

The ideal candidate possesses deep expertise in privacy frameworks, records management, and holds an active CGRC – Governance, Risk and Compliance Certification or equivalent.

Key Responsibilities

• Lead government risk and compliance program for Net
  56.
• Develop and deliver privacy and cybersecurity awareness training programs.
• Provide support to IT depts for best practices to ensure compliance with legal and regulatory requirements in information management.
• Lead vulnerability management program, which includes generating reports, working with cybersecurity engineers and personnel.
• Run assessments/audits of cybersecurity and privacy controls.
• Collaborate with the leadership in creating and writing policies and procedures.
• Collaborate with Information Security teams to ensure appropriate technical and administrative safeguards.
• Participate in security incident response and breach notification activities.
• Perform Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Evaluate third-party vendors for privacy compliance and risk.
• Provide guidance to management and staff regarding privacy obligations.
• Promote a culture of privacy across the organization.
• Develop privacy program metrics and dashboards.
• Prepare reports for executive leadership, audit committees, and board members.
• Track privacy incidents, risk trends, and remediation efforts.

Candidate Requirements

• Mandatory Certification: Must hold an active CGRC – Governance, Risk and Compliance Certification or equivalent r equivalent recognized Information Governance Certification (e.g., ARMA IGP, CIGP).
• Location & Travel Demands: Must live with 30 minutes commute to Deer Field, IL. A valid driver’s license and reliable personal vehicle for regular client site visits (up to 25–30% local driving).
• Education & Experience: Bachelor’s degree in Information Technology, Business Administration, Legal/Compliance, or equivalent field, plus a minimum of 5 years of experience in IT governance, compliance, or risk management.
• Experience with K-12 educational compliance frameworks (FERPA, SOPPA) and SIS integrations is highly preferred.