Cybersecurity Governance, Risk, Compliance Manager

Please paste the following URL into a browser to view the entire job posting on the CAPPS Careers page.https://erphcmprd.cpa.texas.gov/psp/candidateportal/EMPLOYEE/HRMS/c/HRS\_HRAM\_FL.HRS\_CG\_SEARCH\_FL.GBL?Page=HRS\_APP\_JBPST\_FLandAction=UandFOCUS=ApplicantandSiteId=1andJobOpeningId=103410andPostingSeq=1Agency InformationThe Texas Education Agency (TEA) oversees primary and secondary public education in Texas and is committed to improving outcomes for all public school students by providing leadership, guidance, and support to school systems across the state. Core ValuesWe are Determined: We are committed and intentional in pursuing our primary purpose of improving outcomes for students.We are People-Centered: We strive to attract, develop, and retain committed talent that reflects the diversity of Texas, with each individual contributing to our shared vision for students.We are Learners: We seek evidence, reflect on outcomes, and continuously improve in pursuit of excellence for students.We are Servant Leaders: We are public servants committed to improving opportunities for students and supporting those who serve them. Job DescriptionAbout Office of ITThe Office of Information Technology works closely with all agency divisions to implement innovative technology solutions in a cost-efficient manner that supports the goals and priorities of the Texas Education Agency. The Office of IT provides efficient technology solutions and stellar customer services to internal staff, 20 Educational Service Centers, and 1,200-plus public-school districts and charter schools. The following services are provided by IT: leadership on IT initiatives; guidance on security/policy issues; new application development/enhancements; software acquisition; technical support; assistance with technical sections of purchasing documents such as Request for Information (RFI), Request for Offers (RFO), Request for Proposals (RFP); and oversight on the data collection process which helps to support and improve outcomes for all of Texas' 5 million-plus students.Position OverviewThe Cybersecurity Governance Risk and Compliance (GRC) Manager performs advanced (senior-level) information security and cybersecurity analysis work. The GRC Manager reports to the Executive Director of IT Administration and Compliance in the Office of Information Technology and will work closely with the Chief Information Security Officer and the Cybersecurity Operations Manager. The GRC Manager serves as the lead subject matter expert for GRC initiatives, collaborating closely with risk management, security operations and leaders across the agency. The GRC Manager is responsible for overseeing enterprise risks, conducting risk analyses, implementing and advancing policies and a comprehensive control framework to execute the GRC strategy.This role will oversee the administration of standards and controls, risk management, third-party risk, baseline security controls and technology compliance initiatives. The GRC Manager will be solution oriented, and have a strong background in cybersecurity principles, risk management frameworks, and regulatory compliance. Works under limited supervision, with considerable latitude for the use of initiative and independent judgment. The GRC Manager will also work with internal and external team members to support the K12 Cybersecurity initiative by working to enhance cybersecurity in our Texas school systems. Employees at this level may independently perform the most complex information security and cybersecurity work and advise management and users regarding security configurations and procedures.Flexible work location in Texas may be considered for qualified candidates.Please note that a resume is a required attachments for applying to this position. Incomplete applications will not be considered. Applicants who are strongly being considered for employment must submit to a national criminal history background check. Essential Functions Job duties are ot limited to the essential functions mentioned below. You may perform other functions as assigned.1. Cybersecurity Governance Framework: responsible for creating, approving, and enforcing security policies, standards, and procedures that align with strategic business goals and the overall risk appetite of the organization, ensuring alignment with TAC 202 requirements and best practices in accordance with NIST. The Cybersecurity GRC Manager will implement process improvements using GRC tools and methodologies to drive productive gains. 2. Oversee Third Party and Vendor Risk Assessments: responsible for establishing a comprehensive risk management program that regularly conducts formal risk assessments. Additionally, this role is responsible for evaluating the effectiveness of current controls and recommending mitigation strategies based on risk severity.3. Ensure Continuous Regulatory and Policy Compliance: responsible for ensuring adherence to internal polices, as well as external regulations and legal mandates such as TAC 202 and NIST. The GRC Manager will establish and maintain a continuous monitoring program for tracking and resolving non-compliance issues.4. Executive Level Reporting and Communication: coordinate with stakeholders to communicate emerging risks across the organization and implement effective risk mitigation strategies. 5. Team Management and Supervision: guide the team to align with security, audit, and risk management efforts in ongoing security program assessments. This role will also provide guidance to team members to ensure compliance with relevant laws and regulations. QualificationsMinimum QualificationsEducation: Graduation from an accredited four-year college or university Degree field(s): Cybersecurity, Risk Management, Computer Science, Audit, Information Technology Security, Computer Engineering, Computer Information Systems Required Licenses: One or more of the following: CISSP, CISM, CGRC, CRISC, CISAExperience: At