Security Lead (Guilford County)
damco solutionsGuilford County (NC)
Security Lead (Guilford County)
Posted today
damco solutionsGuilford County (NC)
SENIORITY
Lead
About the role
Security Lead Ensures security and compliance requirements are defined, evaluated and tested across selection, design, implementation and go-live. ENGAGEMENT OVERVIEW Client is replacing and consolidating its ERP portfolio (Tyler Munis, Infor Lawson, OpenGov, UKG Kronos) across Finance, HCM and Budget, starting with HR/payroll and capital asset tracking and depreciation off Lawson HCM (go-live required by end of 2029). LOCATION / WORK MODEL U.S.-based only (no offshore). Remote/hybrid is acceptable for appropriate activities as long as deliverables and responsiveness meet County expectations. Onsite presence is set by the County for each project phase and activity. Must be willing to travel as needed throughout the engagement.
KEY RESPONSIBILITIES:
Define the security and compliance requirements for the ERP RFP's technical content, working with County Purchasing and the technology teams. Contribute security and compliance criteria to the evaluation, scoring and shortlisting materials, and assess vendor responses, demonstrations and references. Provide security input to the solution architecture, the integrations catalog and the API strategy. Provide security input to the data conversion and migration strategy for moving County data to the new ERP. Develop and approve security testing plans, and review results during end-to-end testing. Support security-related acceptance criteria in the SOW and contract review. Support security readiness for cutover/go-live and monitoring during stabilization.
REQUIRED QUALIFICATIONS:
Experience defining security and compliance requirements for public sector ERP selection and implementation. Experience planning and overseeing security testing on ERP implementations. Public sector ERP experience (weighted highest in the client's evaluation) and a record of go-live and stabilization success on past ERP projects. Vendor-agnostic advisory capability across multiple ERP vendor ecosystems. Must be U.S.-based and willing to travel. Minimum years of experience: TBD (the client sets none). PREFERRED QUALIFICATIONS / CERTIFICATIONS Certifications related to security standards (e.g., ISO); the specific credential is TBD. Experience with North Carolina local governments, ideally a large county.
Certifications:
TBD (the client names no individual certifications). ERP vendor, cloud provider, security standards, ISO and CMMI credentials are a plus. INDEPENDENCE REQUIREMENT (MUST-HAVE)
MUST-HAVE:
The candidate must be independent of ERP software vendors and system integrators. Candidates must disclose any vendor reseller or investment relationships, or system integrator partnerships, that could influence recommendations. DURATION The contract term is an initial 3 years plus two optional 1-year renewals (up to 5 years); the tentative HCM program runs through stabilization (target June 2030). Proposal stage; depends on contract award.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.