Job Responsibilities
Are you an information security expert with a passion to provide meaningful contributions to your community? The South Carolina Department of Motor Vehicles is seeking a security expert with sound knowledge of security access for a large agency. The IT Security Risk Analyst will assist in the strategic and tactical objectives to support the agency’s ability to govern risks and compliance of the information security program.
This position is located in the Information Security Office at the SCDMV Headquarters, Blythewood, SC.
Responsibilities Of The IT Security Risk Analyst
- In coordination with the Security Team Manager audits DMV’s policies and procedures for compliance with agency objectives and ensures DMV meets any applicable federal laws and standards. Tracks the compliance status of security related policies, procedures, and training to ensure the agency meets security requirements. Ensures security related polices are up to date, reviewed, approved, and published according to DMV’s defined frequency.
- In coordination with the Security Team Manager helps with the agency wide adoption of a NIST based security standard. Assists in the development and reworking of agency policies to support the security standard. Works with departments to incorporate compliance standards into the agency’s processes, initiatives, and the development of information systems.
- In coordination with the Security Team Manager works on outlining and planning DMV’s cyber security training program, helps to track and manage the security courses presented through online training tools, and develops security related communications to be distributed to DMV staff.
- In coordination with the Security Team Manager works on data classification and defining the security controls required to protect it. Works with General Council, Procurement, IMO, and the DART to ensure the proper protections are in place for any new data contracts or IT solutions being purchased.
- In coordination with the Security Team Manager and IMO will work to develop DMV’s data governance plan which will help support the agency’s data security and privacy program.
- Performs other related duties as may be assigned by Security Team Manager. As a member of the information security incident response team (ISIRT), this person will utilize their knowledge of DMV policies, processes, and procedures to assist in responses to security events. ISIRT team members will ensure the Security Team Manager is informed of all actions performed or needed. Incidents will be documented in the event tracking log.
Minimum Qualifications
Minimum and Additional Requirements
- A high school diploma and relevant work experience. A bachelor’s degree may be substituted for the required work experience.
Additional Requirements
- Knowledge of applicable internal and/or external regulatory policies, standards, procedures, controls, privacy laws, and technology.
- Knowledge of information risk concepts and principles, with the ability to relate them to business needs and security controls.
- Specific skills include policy management, ensuring policies are reviewed, updated, approved, and published according to agency defined frequencies.
- Ability to track security training requirements and programs to ensure the agency meets its security training objectives.
- Ability to communicate with audiences of varying levels of technical knowledge.
- Works under the guidance of the Security Team Manager. Employee will operate with minimal supervision and at times independently, performing tasks to complete position objectives.
- Employee has general discretion to use own good judgement in accordance with industry best practices and agency procedures.
- Must have Valid SC Driver's License.
- Able to work past 8:30 am - 5:00 pm. Live within 40 miles of DMV HQ or relocate.
- Required to keep state provided cell phone on and nearby at all times.
Preferred Qualifications
Agency Preferred
- A bachelor's degree in information security, information management, information systems, information science, computer science, business administration, mathematics, statistics, management, or a related field and experience in the information technology field to include experience in a security policy and compliance focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.
- Experience in security frameworks, controls, writing policies/procedures, conducting compliance audits/assessments, developing security documentation and reports, tracking policy & training due dates.
Additional Comments
What’s in it for you?
At the SCDMV you get to be part of an exceptional team and diverse culture that nurtures mutual success for our customers, employees and our communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy and a desire to develop your skills, experience and career.
The South Carolina Department of Motor Vehicles offers an exceptional benefits package for full time employees (FTE) employees.
- Health, dental, vision, long term disability, and life insurance for employees, spouse and children (also available for temporary employees working over 30 hours per week)
- 15 days annual (vacation) leave per year
- 15 days sick leave per year
- 13 paid holidays
- State Retirement Plan and Deferred Compensation Programs (optional for Temporary Employees)
- An exceptional Employee Assistance Program (EAP) at no cost to the employee or members of their household
So, what are you waiting for? Come be a part of a fast-growing, dynamic agency, and join a team that offers an opportunity for accelerated professional growth!
Additional Comments
The Department of Motor Vehicles is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions, including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.
Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education.
