Job Description

### **Job Title: Senior Information Security GRC Analyst (Security Architect - Consultant)**
**Job ID:** 11518
**Client:** South Carolina Department of Administration, Division of Information Security (DIS)
**Employment Type:** Contract
**Duration:** 12 Months (with possibility for extension)
**Work Location:** 100% Remote.
* *Note:* No South Carolina residency is required; open to nationwide candidates. However, preference will be given to local candidates who can come to the office (Columbia, SC) as needed for client/departmental meetings, trainings, and other onsite activities. All travel-related costs for onsite work will be the responsibility of the resource.
**Interview Process:** 1-2 Rounds of Virtual Interviews. In-person availability for interviews is preferred.

---

### **I. Project Overview & Scope**

The South Carolina Department of Administration, Division of Information Security (DIS) oversees the South Carolina statewide information security program. This is a new position created to assist DIS with the execution of its responsibilities under the statewide information security program policy.

**Scope of Project Responsibilities:**
* Supporting agencies during their development of the information security program with direct tactical implementation assistance.
* Developing and tracking agency information security implementation plans.
* Interviewing administrators, managers, and third parties to aid in the development of program artifacts.
* Ensuring high-level assessments of agencies InfoSec work to ensure progress is made.
* Providing high-level analysis of process and procedures work to ensure compliance with state standards.

---

### **II. Daily Duties / Responsibilities**

* Interviewing business and technical owners to determine policies and procedures used for each agency process.
* Developing and tracking InfoSec implementation plan progress.
* Documenting information gathered during interviews.
* Conducting document reviews to assist with developing formal processes and procedures.
* Assessing agency documentation to ensure adequate approaches are used to comply with security controls.

---

### **III. Candidate Skills and Qualifications**

**Required Skills:**
* **10+ Years:** Experience in Information Security and Compliance.
* **3+ Years:** Experience with using a GRC Tool (Archer or similar).
* **2+ Years:** Strong working knowledge of NIST 800-53.
* **2+ Years:** Experience with security audits based on a standard control set as an auditor or responding Information System Security Officer.
* Prior experience with POA&M (Plan of Action and Milestones) or CAP (Corrective Action Plan).
* Strong communication experience.

**Preferred Skills:**
* Government sector experience.
* Prior experience completing an information security plan or system security plan notebook.
* Ability to simultaneously manage multiple InfoSec work efforts.
* Knowledge of IRS 1075, HIPAA, CJIS, MARS-E, and/or PCI-DSS.

**Additional Skills:**
* Ability to identify, map, and re-engineer business processes.
* Strong schedule management and resource planning skills.
* Ability to work at a high volume and fast pace.
* Strong collaborator with a strong ability to meet deadlines.

---

### **IV. Education & Certifications**

* **Required Education:** Bachelor s Degree
* **Preferred Certifications:** CISA, GSLC, or equivalent certification

Job Tags

Similar Jobs