[Hiring] Senior Manager Information Security @State of Colorado

Role Description

Join the Information Security Office as our Senior Compliance Manager and empower a team dedicated to protecting Colorado's public services and data. In this role, you will lead the daily operations and ongoing development of our compliance program within the Information Security Office. Reporting to the leader responsible for Compliance and Risk, you will translate strategic priorities into practical roadmaps, repeatable audit processes, and measurable enhancements that safeguard state public services and constituent information.

• Establish dependable one-on-one meetings, team priorities, and feedback.
• Assess strengths and development needs using work evidence and employee input.
• Provide coaching, training, cross-training, and clear procedures before drawing conclusions about performance.
• Address performance concerns consistently and respectfully, recognize contributions, and support constructive disagreement and early escalation.
• Develop and recommend a phased compliance roadmap aligned with mission needs, obligations, risk, and capacity.
• Evolve procedures for audit intake, scope confirmation, request tracking, evidence collection, quality review, submission, and follow-up.
• Support the Director of Technology, I&S, who owns the formal Office of the State Auditor communications and coordinates executive testimony before the Legislative Audit Committee.
• Maintain corrective-action plans with owners, milestones, dependencies, and validation requirements.
• Maintain a requirements inventory and review policies and procedures with accountable owners.
• Maintain a dashboard, regular leadership updates, quarterly posture reviews, and an annual assessment.
• Actively engage in improving leadership skills, attitudes, and knowledge, especially as related to equity, diversity, and inclusion.

Qualifications

• At least six (6) years of professional experience managing an information security compliance, IT audit, assurance, governance, or risk program, including direct supervision and development of staff.
• Demonstrated experience leading the development or transformation of an enterprise compliance, audit, or assurance program, including the design of governance, processes, and accountability structures.

Requirements

• Additional appropriate education will substitute for the required experience on a year-for-year basis, but cannot completely substitute for these qualifications.
• Training or Certification related to the work assigned to the position will be assigned credit towards substitution for experience and/or education, but cannot completely substitute for these qualifications.
• If the minimum qualifications include a degree requirement, additional appropriate paid or unpaid experience will substitute for the required education on a year-for-year basis.

Benefits

• Support for a healthy balance of work and personal time.
• Access to various offerings that allow for fulfilling lives.