> Markdown version of [/jobs/ext/88626-it-security-and-compliance-manager](https://www.wearedevelopers.com/jobs/ext/88626-it-security-and-compliance-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security and Compliance Manager - **Company:** City of St Charles - **Location:** St. Charles, IL, United States - **Experience:** Expert - **Salary:** $103,550.0 - $144,970.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Data Security, Dynamic Host Configuration Protocol, Domain Name System (DNS), Desktop Environments, Supervisory Control and Data Acquisition (SCADA), Identity and Access Management, Internet Security, Information Systems Security Architecture Professional, Windows Servers, Network Architecture, PCI Data Security Standards, TCP/IP, Virtualization Technology, Enterprise Software Applications, Cloud Platform System, System Availability, Firewalls (Computer Science), Information Technology - **Published:** May 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2f0f838f5b62fb1d ## About the Role Do you have experience in Vendor relationship building?, Do you have a Bachelor's degree?, * Bachelor's degree in Cybersecurity, Computer Science, or a closely related field. * Minimum of five (5) years of experience in cybersecurity, compliance, or information security. * Strong analytical and problem-solving abilities, excellent written and verbal communication skills, strong organizational skills, attention to detail, and the ability to explain complex security concepts to technical and non-technical audiences are critical to be successful in this position. * One or more professional certifications preferred: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Cloud Security Professional (CCSP) or equivalent. * Candidates should have experience or familiarity with security frameworks such as Center of Internet Security (CIS) Controls, National Institute of Standards and Technology (NIST) Cybersecurity Framework, International Organization for Standardization (ISO) 27001, Cloud Security Alliance (CSA), and Cloud Controls Matrix (CCM); risk management methodologies such as NIST 800-39 and ISO 27005; regulatory frameworks including Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry-Data Security Standard (PCI-DSS) and Criminal Justice Information Services (CJIS) Security, ICS/SCADA environments and IT/OT security concepts; Microsoft Windows Server/Desktop environments; Microsoft Active Directory and Entra ID; cloud platforms and identity management systems; network infrastructure, TCP/IP, DNS, DHCP, and firewalls; and virtualization technologies and enterprise applications. ## Description Seeking a highly skilled and forward-thinking IT professional to lead and strengthen our cybersecurity and compliance initiatives across City operations. This critical role will help safeguard the systems and infrastructure that support essential public services systems residents and employees rely on every day. Will work collaboratively across departments to build a strong security-first culture while ensuring the City remains aligned with industry security standards. This is an opportunity to make a meaningful impact while growing your career in public sector cybersecurity leadership., * Cybersecurity & Risk Management - Assess, analyze, and recommend security safeguards to protect the confidentiality, integrity, and availability of systems and data; review security controls and conduct security framework assessments; identify vulnerabilities and help coordinate remediation efforts across systems and infrastructure; assist with operating system configuration compliance, and security baseline implementation; support security operations involving cloud environments, identity management, networking, virtualization, and enterprise systems; and help maintain and strengthen the information security program aligned with industry best practices. * Compliance & Governance - Conduct compliance assessments and assist departments in resolving identified gaps; support audits and respond to inquiries regarding compliance with cybersecurity frameworks and regulations; develop and maintain security policies, standards, procedures, and documentation; translate regulatory and contractual requirements into practical, measurable security controls; maintain records related to compliance and security governance activities. * Security Awareness & Communication - Lead engaging cybersecurity awareness and training initiatives for City employees; educate staff on compliance requirements and secure technology practices; communicate security risks and compliance obligations to leadership and stakeholders in clear, actionable language; contribute cybersecurity-related content to employee communications and publications. * Collaboration & Vendor Management - Coordinate security initiatives with Information Technology staff and City departments; manage vendor relationships and contracts related to cybersecurity services and operations; and promote exceptional customer service and foster a collaborative, professional workplace culture. * Position may involve occasional after-hours support during security incidents or critical operations. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)