Risk Management and Compliance Analyst II – State of South Carolina – Columbia, SC

This position is located in Information Assurance, Richland County. This position will support the development of Information Security plans, policies, standards, and procedures related to Federal, State, and Agency compliance requirements. Leads the independent analysis, design, implementation, and modification of information security plans, policies, standards, and procedures to meet business needs.

• Create and prepare compliance reports to identify technical and procedural findings that evaluates the agency’s compliance programs. Evaluates, creates, and writes security compliance processes and/or audits for external services (e.g., cloud service providers, data centers). Update security design feature documents to guide employees to confirm compliance standards are incorporated into the agency’s processes, initiatives and development of information systems.
• Creates, organizes, and updates required documentation to comply with cybersecurity laws, regulations, policies, standards, or procedures. Work with various internal teams to create cybersecurity related business and technical documents and artifacts to comply with laws, regulations, policies, standards, or procedures.
• Assist Deputy CISO for Risk and Compliance with Plans of Action and Milestones (POAM) process. Work with points of contact to create, track, and close POAM tickets.
• Responsible for the aggregation, completion, and submission of required Center for Medicare and Medicaid Services (CMS) compliance documents. Responsible for the aggregation, completion, and submission for all non-CMS compliance requirements.
• Other duties as assigned

Bachelor’s degree and at least two years of directly related experience.

Must have and maintain a valid driver’s license

Additional Requirements:

• Lifting requirements: 15 pounds
• Minimal supervision by the Deputy Chief Information Security Officer for Risk and Compliance within the Office of Information Assurance