Senior Information Security GRC Analyst

******* Please note that the candidates / Consultants need to be on our W2 for this job Posting ********

·         Client: State of South Carolina

·         Job Id: 11518

·         Job Title: Senior Information Security GRC Analyst (Security Analyst - Consultant)

·         Why is this position open: New Position to assist DIS with the execution of its responsibilities under the statewide information security program.

·         Will close to submissions on July 1st, 2026, 5:00PM EST.

·         Interview Process: 1-2 Rounds of Virtual Interviews. In person availability for interviews preferred.

·         Duration of the Contract: 12 Months; Possibility for Extension: Yes

·         Work Location: Role is 100% Remote. Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.

·         Candidate location: No South Carolina residency required. Open to nationwide candidates. All travel-related costs for onsite work will be the responsibility of the resource no matter the frequency of onsite work.

Required Skills

·         10+ Years of Experience in Information Security and Compliance.

·         2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer

·         Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)

·         Prior Experience POA&M or CAP.

·         Strong Communication Experience.

·         Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)

·         Education - Bachelor''s Degree - field of study is open, but the degree must be complete and verifiable

Preferred Skills

·         Have completed an information security plan or system security plan notebook.

·         Simultaneously, manage multiple infosec work efforts.

·         Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.

·         Government sector experience

·         Certification - CISA, GSLC, or equivalent certification