IT Security & Compliance Specialist I - EHRA

Department of Information Technology

Chief Deputy SCIO

IT Security & Compliance Specialist I (NS)

60036085

DT08

Salary Range: $75,818 - $113,727

The position is designated Statutory Exempt (EHRA) and is exempt from the State Human Resources Act.

This position may be eligible for hybrid remote work in accordance with state policy and the agency’s remote work program but does require weekly onsite work. Any telework will be under the conditions of the state Teleworking Program Policy and the employer may end any teleworking arrangement at any time in the employer's sole discretion.

Are you ready to take the next step in your career?

We currently have an opening for an IT Security & Compliance Specialist I.

The Security and Compliance Specialist I supports the Department of Environmental Quality’s (DEQ) information security, risk management, and regulatory compliance programs. This position performs entry-level professional work assisting with security control monitoring, compliance documentation, audit support, and risk tracking in accordance with State of North Carolina IT security policies, standards, and frameworks. The position works under general supervision and follows established procedures and guidelines.

Key Responsibilities:

Information Security Operations
• Support the implementation and maintenance of security controls across agency systems.
• Monitor security tools, alerts, and reports to identify threats, mitigate risks, and escalate incidents as needed.
• Assist with vulnerability management, security configuration reviews, and access control monitoring.
• Support the administration of firewalls, VPNs, web application firewalls (WAFs), and other security technologies.

Compliance & Risk Management
• Support compliance with state and federal security requirements and frameworks, including NIST, CIS, HIPAA, and the NC Statewide Information Security Manual.
• Maintain security documentation, policies, procedures, and system security plans.
• Assist with risk assessments, control evaluations, audits, and remediation tracking.

Audit & Security Assessments
• Support internal and external audits by gathering documentation and responding to information requests.
• Assist with annual risk assessments, security reviews, and validation of security controls.
• Document findings and track corrective actions to completion.

Security Awareness & Training
• Support security awareness initiatives, training programs, and user guidance.
• Develop and maintain security documentation, job aids, and process materials.

Collaboration & Reporting
• Partner with IT teams, business units, and external stakeholders to support security and compliance objectives.
• Prepare reports, metrics, and status updates on security, risk, compliance, and remediation activities.
• Communicate risks, issues, and progress to leadership and security management.

About the Division:
The Information Technology Services division supports the constituent programs and divisions of the N.C. Department of Environmental Quality with tools and technologies necessary to effectively advance DEQs mission of conserving and protecting North Carolina's natural resources.

Anaja Lakeiya McClinton