Governance, Risk, and Compliance Manager - Columbia

About Us Business is booming in South Carolina! Are you ready to be a part of developing and connecting the next generation of workers in this state? Year after year, experts pick our state as one of the best in the country for doing business. Just last year, South Carolina announced more than 8,000 new jobs and $9.12 billion in capital investment. Entrepreneurs are flocking to cities like Greenville, Charleston, Columbia, and Rock Hill to start and grow their businesses. And our hospitality industry is primed to take off as travelers from around the world continue to discover the beauty and accessibility of South Carolina’s mountains and coast.

Here at the South Carolina Department of Employment and Workforce (DEW), we are laser-focused on connecting every jobseeker who comes through our doors with their next great career opportunity! Are you looking for a meaningful position at an agency brimming with optimism and camaraderie that also offers job security, affordable health insurance, great retirement benefits, and work-life balance? If so, continue reading to discover your chance to make a difference at DEW!

Job Description Are you a cybersecurity expert interested in using your skills to ensure information security in a government agency? Our Governance, Risk and Compliance (GRC) Manager will be a key player in DEW’s cybersecurity efforts. Partnering with the Chief Information Security Officer (CISO), the GRC Manager will help develop and implement cybersecurity strategies, policies, and procedures. This includes conducting security assessments, implementing security controls, and assisting with incident response and recovery efforts. The ideal candidate will have strong decision-making skills, team collaboration abilities, and efficient time management. Key Responsibilities• Develop and implement security policies, standards, and procedures to protect agency assets and sensitive data.

• Participate in audits and assessments of internal and external systems, providing recommendations for risk mitigation.
• Conduct security impact assessments for configuration changes and document findings.
• Assist in planning and coordinating remediation steps for external audit findings.
• Ensure applications, hardware, infrastructure, and access controls meet cybersecurity best practices and industry standards.
• Provide security administration for various operating systems and software.
• Utilize analytical and problem-solving skills.
• Understand information risks and security controls.
• Write detailed technical documentation on security policies and procedures.
• Effectively communicate with technical and non-technical audiences.
• Understand project management methodologies.

Are you ready to take on this challenge and help support South Carolina’s workforce system? Please apply. We look forward to hearing from you!

Education and Experience A bachelor's degree in information technology systems, computer science, or a related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.

Additional Requirements Position may require employee to work evenings and weekends. Required certification(s) up-to-date. Other duties as required. Certified in Risk and Information Systems Control (CRISC) (preferred) Certified Information Systems Auditor (CISA) (preferred) Supplemental questions are considered part of your official application. Please complete the State application to include all current and previous work history and education. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position.