Information Security Compliance Consultant

This is a fully remote position, open to applicants in South Carolina.

📋 Description

• Assist agencies in implementing information security programs and compliance initiatives.

• Conduct interviews with business owners, technical teams, administrators, and third-party stakeholders to collect security and compliance requirements.

• Create, document, and maintain security policies, procedures, and governance artifacts.

• Monitor and track the implementation of Information Security plans and remediation efforts.

• Execute compliance assessments based on established security frameworks and control standards.

• Review agency documentation and offer recommendations to enhance security posture and compliance readiness.

• Analyze current business processes to identify opportunities for improvement and risk mitigation.

• Assist in formulating corrective action plans (CAP) and Plans of Action & Milestones (POA&M).

• Manage multiple concurrent security and compliance initiatives while adhering to project timelines.

• Prepare reports, findings, and compliance status updates for leadership and stakeholders.

• Ensure consistency with state security standards, regulatory requirements, and industry best practices.

⛳️ Requirements

• Over 10 years of experience in Information Security and Compliance.

• More than 2 years of experience in conducting security audits or acting as an Information System Security Officer (ISSO).

• In-depth knowledge of NIST 800-53 security controls and compliance requirements.

• Experience in developing and managing Plans of Action & Milestones (POA&M) and Corrective Action Plans (CAP).

• At least 3 years of experience with Governance, Risk, and Compliance (GRC) platforms such as Archer or similar tools.

• Exceptional documentation, communication, and stakeholder management abilities.

• Proven experience in assessing security controls and compliance programs.

• Bachelor's Degree is preferred.

🏝️ Benefits

• Fully remote position.

• Open to candidates nationwide.

• CJIS Certification required post-onboarding.