Risk Management & Compliance Manager

Risk Management & Compliance Manager

About Information Technology in the Administration Division Under the general supervision of the IT Director, serves as the Risk Management & Compliance Manager for the Information Technology section. Conducts risk management activities to identify current and future threats and to help the organization reach an acceptable level of risk.

Responsibilities include:

• Providing subject-matter expertise and ensuring implementation of the information security architecture, risk management standards, gap analysis, best practices, and systems/processes to ensure information privacy/protection.
• Reviewing the security features of new information security practices, systems, and business services to ensure they meet the security requirements of new and existing policies.
• Reviewing analyses of reports and logs obtained from firewalls, external and internal scanning devices, and security software. Reporting violations and recommending solutions.
• Working with IT staff and outside vendors to determine the effectiveness and security of agency resources. Assisting in the development of scenarios of usage, testing for abnormalities or exposures. Using available tools to determine the effectiveness of Security and Risk programs and if guidelines and policies are being followed.
• Completing the Position Description process for all assigned employees.
• Assisting in all areas of Information Technology as requested by the IT Director or Director of Administration.

This position also includes an excellent benefits package:

• Public Service Loan Forgiveness eligibility.
• Paid parental leave.
• Health, dental, vision, long-term disability, and life insurance for employees, spouses, and children.
• Fifteen days of annual (vacation) leave per year.
• Fifteen days of sick leave per year.
• Thirteen paid holidays each year.
• State Retirement Plan and Deferred Compensation Programs.

Minimum and additional requirements:

• Bachelor's degree in computer science, business, or related discipline.
• Five years of experience in Information Technology, of which at least three years were in the information security field.
• Position may require employees to work evenings and weekends.
• Position may be required to report to work during emergency situations.

Preferred qualifications:

• Experience using Microsoft Defender or a similar XDR Solution.
• Knowledge of applicable internal and/or external regulatory policies, standards, procedures, and controls. Knowledge of governance, risk and compliance (GRC) program management.
• Understanding of risk assessment process, monitoring, and reporting.
• Ability to apply information security principles to business solutions.
• Ability to act as liaison and effectively communicate information security topics (e.g., data constraints, information needs) to both technical and non-technical audiences at all levels of the organization.
• Knowledge of developing and managing an information security program, including its policies, standards, procedures, technologies, and controls.
• Knowledge in identifying and managing information security risks, threats, and incidents at an enterprise level.

Additional comments:

Drug screening, credit check, delinquent tax check, SLED background check, and grievance check are required. This office is an equal opportunity and affirmative action employer. EEOP utilization report available upon request. We are committed to providing equal employment opportunities. If you have a limitation or disability that requires an accommodation during the application process, please let us know by emailing recruitment.