IT Security & Compliance Specialist II - EHRA - Early Career

We’re excited to announce an opening for an IT Security & Compliance Specialist II with the State of North Carolina’s Department of Information Technology (NCDIT).

The Early Career Associate Program is ideal for recent graduates, early-career professionals, or those looking to transition to a new career seeking broad exposure to state IT operations.

As a Business Continuity/Disaster Recovery (BC/DR) Specialist, you’ll play a vital role in the Enterprise Security Risk Management Office (ESRMO). You’ll help safeguard IT systems and services across the state by shaping, supporting, and strengthening business continuity and disaster recovery programs.

You’ll collaborate with executive branch agencies statewide helping them develop and maintain Business Continuity Plans, Disaster Recovery Plans, Continuity of Operations (COOP), Continuity of Government (COG), and pandemic plans. You’ll also advise on selecting, implementing, and optimizing enterprise IT risk and continuity tools.

What you’ll do:

• Support the statewide IT Business Continuity Management program by reviewing agency continuity plans, identifying improvements, and ensuring compliance with statewide standards.
• Partner with agency leadership, security teams, auditors, and IT staff to build and refine recovery strategies for applications, hardware, network infrastructure, data, and telecommunications.
• Serve as the administrator for BC/DR and Emergency Notification System applications.
• Contribute to the development, implementation, and alignment of statewide policies, standards, and regulatory requirements.
• Provide clear documentation, reporting, and recommendations to leadership while establishing statewide metrics.
• Design and deliver BC/DR training and awareness programs.
• Support and guide agencies through exercises, tests, and reviews-and assist in assessing and resolving risk findings.

About the Division:

The Department of Information Technology (DIT) serves as the Technology Center for the State of NC operating two data centers in the state - the Eastern Data Center and the Western Data Center - and reporting directly to the Office of the Governor. Services that DIT provides reach a client base of state and local government agencies, as well as schools, colleges and universities. The State Chief Risk Officer (SCRO) and Deputy State CISO report directly to the State Chief Information Officer (SCIO) and provides leadership and direction for the ESRMO. The ESRMO is organized to help the state meet the requirements of the security standards legislation, N.C.G.S. § 147-33.110-33.113 and N.C.G.S. § 147-33.72c and other legal and regulatory requirements. ESRMO responsibilities for information security include the following: Support the development and maintenance of information security policies, standards and procedures by translating business objectives into security policies and standards that support the Statewide Technical Architecture.

The following Management Preferences are not required, but applicants that possess these skills are preferred:

• FEMA Level 1 Professional Continuity Practitioner, FEMA Level II Master Continuity Practitioner, Certified Business Continuity Professional (CBCP) Master Business Continuity Professional (MPCP) and/or Certified Information Systems Auditor (CISA).
• Demonstrated experience with a state, local or federal government entities

“This position requires a fingerprint-based background search. Hires must agree to a fingerprint-based background search prior to being hired.”, Some state job postings say you can qualify by an “equivalent combination of education and experience.” If that language appears below, then you may qualify through EITHER years of education OR years of directly related experience, OR a combination of both. See the Education and Experience Equivalency Guide for details.

Bachelor’s degree in computer science or a related IT field or closely related field from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area;

OR

Associate degree in computer science or a related IT field or closely related field from an appropriately accredited institution and three years of progressive experience in IT security or closely related area; or an equivalent combination of education and experience.

Recruitment Range: Up to $107,543

The position is designated Statutory Exempt (EHRA) and is exempt from the State Human Resources Act.

This position may be eligible for hybrid remote work in accordance with state policy and the agency’s remote work program but does require weekly onsite work.

The N.C. Department of Information Technology (NCDIT) serves as the Technology Center for the State of NC. Services that NCDIT provides reach a client base of state and local government agencies, as well as schools, colleges and universities. NCDIT’s mission is to enable trusted business-driven solutions that meet the needs of North Carolinians. NCDIT provides technology services to state agencies and is charged with closing the digital divide by expanding availability of broadband services and promoting the adoption of affordable, high-speed internet.