Director of IT Security and Risk Management

The North Carolina Department of Public Instruction is seeking applicants for an IT Security and Compliance Manager I (Working Title: Director of IT Security and Risk Management) for our Division of Technology Services and Digital Learning

The Division of Technology Services and Digital Learning provides leadership of IT and digital learning initiatives. Included in this Division are the Offices of Digital Teaching and Learning Enterprise Architecture Desktop Support Shared Services Project Management IT Systems Modernization and Virtual Instruction Support Services. Specific activities include managing the agencys information resources; establishing and monitoring compliance with information management policies procedures and standards; and advising personnel on matters related to the effective use of information technology. The Division provides technical leadership and direction which include implementing monitoring and providing all levels of support to the enterprise on computing systems and related infrastructure desktop/laptop support and audio/visual department services.

This position is responsible for the development implementation and ongoing improvement of an enterprisewide risk management framework. The Director of IT Security and Risk Management under the direction of the Chief Information Officer will engage with agency management staff and committees to fully develop and manage the framework. This individual will be responsible for ensuring best practices are adopted and managed across the organization. Additionally the Director will serve as DPIs Security Liaison with the Enterprise Security and Risk Management Office (ESRMO) of the NC Department of Information Technology (DIT).

The Director of IT Security and Risk Management is responsible for successfully designing implementing and maintaining a Cybersecurity Risk Program that enables leaders to make informed decisions. This includes the identification evaluation and treatment of information security risks. The Director will work proactively with various divisions offices and external departments to implement practices that meet NCDITs defined policies and standards for information risk management.

EEO Statement:

The State of North Carolina and the Department of Public Instruction provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race color religion age sex national origin disability status genetics protected veteran status sexual orientation gender identity or expression or any other characteristic protected by federal state or local laws. This policy applies to all terms and conditions of employment including recruiting hiring placement promotion termination layoff recall transfer leaves of absence compensation and training.

To receive credit for all of your work history and credentials you must list the information on the application form. Any information listed under the text resume section or on an attachment.

• Demonstrated experience deploying operating and/or maintaining Enterprise Information Security programs and/or controls in the public service sector.
• Demonstrated experience following information security areas (Ex. Security Governance and Management Security Frameworks policies and procedures and/or Federal/State Privacy Laws and/or regulatory guidelines including HIPAA Internal Revenue Tax Code SSA and/or NIST).
• Demonstrated experience with application security controls and/or top security considerations for application development in the Software Development Lifecycle.
• Demonstrated experience with database security controls including access control auditing and/or configuration best practices.
• Demonstrated experience with risk management including vulnerability assessment control assessment likelihood determination and/or risk prioritization and/or experience conducting risk assessments audits and/or reviews.

Some state job postings say you can qualify by an equivalent combination of education and experience. If that language appears below then you may qualify through EITHER years of education OR years of directly related experience OR a combination of both. See for details.
Bachelors degree in computer science or a related IT field or closely related field from an appropriately accredited institution and two years of progressive experience in IT security or closely related area; or Associate degree in computer science or a related IT field or closely related field from an appropriately accredited institution and three years of progressive experience in IT Security or closely related area; or an equivalent combination of education and experience.

All applicants must complete and submit a state application for employment using the NEOGOV Online Job Application System Job Opportunities Sorted by Job Title ascending Careers (governmentjobs)for the State of North Carolina.

Any applications not received by the advertisement closing date and time will not be accepted outside of the portal. To receive credit for work history and credentials the applicant must list the information on the online application form. Any information omitted from the application cannot be considered for qualifying credit. NC DPI welcomes attached or incorporated resumes cover letters and reference information but these items will not be used for screening for qualifying credit.

Email: