We are seeking an experienced Senior Information Security GRC Analyst to support in executing statewide information security initiatives. This role focuses on governance, risk, and compliance (GRC), security assessments, policy development, implementation planning, and agency compliance with state and federal security standards. This is a fully remote opportunity; however, preference will be given to candidates located in South Carolina or those available to attend occasional onsite meetings, training, and client activities in Columbia, SC. Required skills (must include years of experience):

• 10+ Years of Experience in Information Security and Compliance.
• 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer
• Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)
• Prior Experience POA&M or CAP. Strong Communication Experience.
• Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)

Preferred Skills:

• Have completed an information security plan or system security plan notebook.
• Simultaneously, manage multiple infosec work efforts.
• Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.
• Government sector experience

Required Education: Bachelor’s Degree Preferred Certifications: CISA, GSLC, or equivalent certification Daily Duties / Responsibilities: Duties include, but are not limited to:

• Interviewing business and technical owners to determine policies and procedures used for each agency process.
• Developing and tracking infosec implementation plan progress.
• Documenting information gathered during both interviews and
• Document reviews to assist with developing formal process and procedures.
• Assessing agency documentation to ensure adequate approaches are used to comply with controls.

Pay: $70.00 - $80.00 per hour Application Question(s):

• What employment type do you prefer - C2C, W2, or 1099?

Work Location: Remote