Information Governance & Compliance Specialist

The Information Governance & Compliance Specialist at Net56 is responsible for developing, maintaining, and auditing data governance, regulatory compliance, and risk management frameworks for our K-12 school district clients and internal operations. This role ensures that client data environments adhere to state, federal, state and educational compliance standards while implementing structured operational governance policies., * Lead government risk and compliance program for Net56.

• Develop and deliver privacy and cybersecurity awareness training programs.
• Provide support to IT depts for best practices to ensure compliance with legal and regulatory requirements in information management.
• Lead vulnerability management program, which includes generating reports, working with cybersecurity engineers and personnel.
• Run assessments/audits of cybersecurity and privacy controls.
• Collaborate with the leadership in creating and writing policies and procedures.
• Collaborate with Information Security teams to ensure appropriate technical and administrative safeguards.
• Participate in security incident response and breach notification activities.
• Perform Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Evaluate third-party vendors for privacy compliance and risk.
• Provide guidance to management and staff regarding privacy obligations.
• Promote a culture of privacy across the organization.
• Develop privacy program metrics and dashboards.
• Prepare reports for executive leadership, audit committees, and board members.
• Track privacy incidents, risk trends, and remediation efforts.

The ideal candidate possesses deep expertise in privacy frameworks, records management, and holds an active CGRC - Governance, Risk and Compliance Certification or equivalent., * Mandatory Certification: Must hold an active CGRC - Governance, Risk and Compliance Certification or equivalent r equivalent recognized Information Governance Certification (e.g., ARMA IGP, CIGP).

• Location & Travel Demands: Must live with 30 minutes commute to Deer Field, IL. A valid driver’s license and reliable personal vehicle for regular client site visits (up to 25-30% local driving).
• Education & Experience: Bachelor’s degree in Information Technology, Business Administration, Legal/Compliance, or equivalent field, plus a minimum of 5 years of experience in IT governance, compliance, or risk management.
• Experience with K-12 educational compliance frameworks (FERPA, SOPPA) and SIS integrations is highly preferred.