Information Security AUD (#021800) IT Security, Columbia (RICHLAND)

Under the supervision of Risk Management & Compliance Manager, plans, organizes and conducts comprehensive audits of IT security & privacy systems and controls. Assists in preparation and formulation of SCDC privacy and information security audit policies. Assists in performing or providing guidance for data classification, data destruction, data sharing and data retention. Performs audits for compliance with IT security and privacy policies. Coordinates routine and special reports. Coordinates with other SCDC divisions to ensure IT security and privacy requirements are met. Coordinates and tracks SCDC IT security & privacy audits. Maintains records of SCDC IT security/privacy audits and results support other IT security/privacy efforts when needed. Through training and other means, maintains adequate level of skill and knowledge to perform audits on current and emerging controls and IT systems. Resume preferred, but not required Questions regarding the application process, this job posting or any other postings with the SCDC should be directed to: Recruiting and Employment Services (803) 896-1649 Employment@doc.sc.gov State of South Carolina Minimum Requirements: A bachelor's degree in information technology systems, computer science, or a related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis. SCDC Minimum Qualifications: A bachelor's degree in information technology systems, computer science, or a related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year for year basis. General knowledge and understanding of auditing information privacy and security controls and performing risk assessments (cloud and on-prem). Knowledge of NIST infosec/Privacy/risk frameworks. Preferred certifications: CISA, CRISC, CISSP, GCCC, CIPM, or other relevant certifications. The South Carolina Department of Corrections is committed to providing equal opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, age (40 or older), disability or genetic information. Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education.