Information Security Officer

Information Security Officer

Type: Contract

Length: 12+ months

Location: Columbia, SC (hybrid/may relocate at own expense)

Interview Process: 1 round/virtual

Overview

We're seeking a proactive and detail-oriented Information Security Officer to lead the implementation of security policies and procedures across our organization. This role is critical in shaping our security posture, ensuring compliance with industry standards, and fostering a culture of security awareness.

Qualifications

• A Bachelor's Degree in information technology, computer science

• 3+ years of experience in information security, policy development, or compliance.

• 3+ years of experience with security frameworks (e.g., NIST, ISO 27001, CIS Controls ).

• Excellent writing and communication skills.

• Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer .

Responsibilities

• Review and implement new information security policies that have been developed for Client Agencies.

• Collaborate with stakeholders to ensure policies are practical, enforceable, and tailored to organizational needs.

• Maintain a comprehensive policy repository and ensure timely updates.

• Translate high-level policies into actionable procedures and guidelines for technical and non-technical teams.

• Develop clear, concise documentation that supports training, audits, and operational consistency.

• Ensure procedures are accessible and understandable across departments.

• Compliance & Risk Management

• Monitor compliance with internal policies and external regulations

• Conduct risk assessments and recommend mitigation strategies.

• Support internal and external audits by providing documentation and evidence of compliance.

• Assist in developing security awareness programs and training materials.

• Provide guidance and support to teams on policy interpretation and implementation.

• Stay current with emerging threats, technologies, and best practices.

• Recommend enhancements to existing policies and procedures based on evolving risks and feedback.