Security Compliance and Resilience Administrator
- Gwinnett County, GA
- $89,209-118,200 per year
- Permanent
- Full-time
The Security Compliance and Resilience Administrator supports Gwinnett County's Cybersecurity Teams in safeguarding County systems and ensuring operational resilience. This role is primarily responsible for leading the County's Business Continuity and Disaster Recovery (BC/DR) initiatives, including classification of critical systems, development and maintenance of continuity plans, and coordination of recovery exercises. Secondary responsibilities include supporting broader security compliance efforts across regulatory frameworks such as PCI-DSS, CJIS, and HIPAA. The ideal candidate will possess deep expertise in BC/DR program management, a strong understanding of IT risk and compliance, and the ability to collaborate across departments to build secure and resilient operations. This position requires a blend of technical proficiency, strategic thinking, and excellent communication skills.Essential Duties
- Business Continuity and Disaster Recovery (Primary Functions)
- Lead classification of applications, systems, and data based on operational impacT and criticality
- Develop, document, and maintain the County's IT Business Continuity Plan (BCP)
- Develop, document, and maintain the County's IT Disaster Recovery Plan (DRP)
- Coordinate and facilitate BC and DR exercises; document results and track mitigation efforts
- Ensure continuity procedures align with ITS standards and integrate with change management
- Partner with County departments and vendors to ensure BCP effectiveness and readiness
- Monitor emerging threats and trends to enhance resilience strategies
- Compliance & Regulatory Coordination (Secondary / Supporting Function)
- Assist the County in maintaining compliance with PCI-DSS, CJIS, and HIPAA
- Assist in remediation of findings from internal audits and compliance assessments
- Track and respond to non-technical incidents such as lost devices or policy violations
- Vendor and Systems Security Oversight (Secondary / Supporting Function)
- Evaluate and improve IT vendor security practices and documentation
- Review and approve system build forms to ensure secure configurations
- Classify systems, applications, and data based on criticality to County operations
- Risk Management & Policy Governance (Secondary / Supporting Function)
- Maintain and enhance IT security policies, standards, and procedures
- Support risk assessment efforts and manage remediation of control gaps systems
- Evaluate emerging technologies and trends to reduce County risk
- Training and Cross-Team Collaboration
- Coordinate staff training on compliance, security, and BC/DR roles
- Work with cross-functional teams to develop scalable, compliant processes
- Train ITS staff regarding their roles and responsibilities in the business continuity process
- Maintain continuing education in cybersecurity, compliance, and BC/DR disciplines
- Communication skills associated with collaborative efforts for projects, tasks, troubleshooting and presentations:
- Internal Customers
- External Customers
- Vendors
- This job is a civilian position in either a public safety department or in Information Technology with close ties to public safety. Due to the sensitive nature of this position, a public safety background which may include motor vehicle & criminal histories, and fingerprinting
- This job is eligible for a hybrid telework schedule after an initial probationary period and individual approval
- This job may require on-call rotation and emergency after hours, weekends, and/or holidays
The grade for this position is D61(1). Salary will be dependent on education and experience.Effective 4/11/2023, this position is eligible for the Employee Referral Program.Minimum Qualifications
- Bachelor's degree in a Information Security, Computer Science, Information Systems, Business Continuity, or related field AND
- Seven years progressively responsible, professional level security and compliance experience in a large-scale IT environment
- An equivalent combination of education and experience sufficient to successfully perform the essential duties of the job such as those listed above will also be considered
- Strong acumen to understand critical business applications' technical dependencies
- Minimum 7 years of hands-on Business Continuity and/or Disaster Recovery experience in a large-scale IT environment with 5+ years' experience in BCP Program Management
- Multiple certifications in BCP Management such as Certified in Risk and Information Systems Control
- (CRISC), Certified Business Continuity Manager (CBCM), Business Continuity Institute Certification (CBCI), or Certified Business Continuity Professional (CBCP) preferred.
- Experience working in a regulated environment and satisfying compliance requirements and directives.
- Knowledgeable in business continuity frameworks, practices and principles including COBIT, ISO 22301, FFIEC BCP Booklet, FCA Operational Resilience Requirements (SYSC 15A.2)
- High level of accountability and ability to execute; familiar with estimating and planning own work effort including recognizing and escalating risks and issues in relation to delivery; attention to detail
- Must be a critical thinker with strong analytical and problem-solving skills
- Project management expertise with ability to lead cross-functional initiatives
- Ability to manage multiple priorities in high-pressure environments
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to interact, communicate, and relate security and risk-related concepts to technical and non-technical audiences.
- Excellent presentation and facilitation skills
Gwinnett is the preferred community where everyone thrives!Mission
Gwinnett proudly supports our vibrantly connected community by delivering superior services.Values
Integrity: We believe in being honest, building trust, and having strong moral principles.
Accountability: We believe in stewardship, transparency, and sustainability.
Equity: We believe in fairness and respect for all.
Inclusivity: We believe in engaging, embracing, and unifying our communities.
Innovation: We believe in continual adaptation of technology, process, and experience.Hiring ProcessGwinnett County is an Equal Opportunity Employer. For more information regarding our hiring process, please click the links below:Gwinnett County is committed to creating a diverse workforce. As an Equal Opportunity Employer, we prohibit discrimination on the basis of genetic information (including sex), race, color, national origin (including ancestry), gender (identity and expression), sexual orientation, age, marital status, familial status (including pregnancy), disability, military or veteran status, religion, political affiliation, immigration status, homeless status, or any other category protected by law.For questions about recruitment, or to request a reasonable accommodation during the application, interview, or testing process, please call Human Resources at 770-822-7915 or email .Reasonable accommodations for qualified individuals with disabilities may be requested. If you need an accommodation during the application, interview, or testing process, contact Human Resources at 770.822.7915 or HREmployeeRelations@GwinnettCounty.com. This email is only for accommodation requests; for questions related to job postings, use jobs@gwinnettcounty.com.Our Benefits program is designed to support every aspect of our employees' lives, from physical and emotional to social and financial.Along with their salary, employees receive a variety of comprehensive benefits as part of their total compensation.On average, our employees' benefits are worth 48 percent of their base salary!In other words, employees would spend nearly half of their pay to purchase these benefits on their own. For employees' medical premium alone, the County contributes an average of 91 percent of the cost!Health
- Medical plans for active and retired employees
- Dental and vision plans
- Prescription drug plan
- Onsite Employee Wellness Center
- 24/7 Employee Assistance Program (EAP)
- Immunizations
- Wellness education and incentive programs
- Annual wellness fair
- Training and professional development opportunities
- Family planning benefits
- Four weeks of paid parental leave
- Annual/Sick Leave
- 12 paid holidays per calendar year
- 1 paid floating holiday per calendar year
- Flexible spending accounts for medical and dependent care
- Health Reimbursement Arrangement (HRA) available
- Health Savings Account (HSA) available
- Retirement and Savings Plans
- 401(a) Defined Contribution
- 457 (b) Deferred Compensation
- Longevity pay
- Tuition reimbursement
- Financial education programs
- Basic, optional, and dependent life insurance
- Short-term and long-term disability
- Critical illness and accident insurance
- Hospital indemnity insurance
- Identity theft protection