Security Lead Ensures security and compliance requirements are defined, evaluated and tested across selection, design, implementation and go-live.
ENGAGEMENT OVERVIEW
Client is replacing and consolidating its ERP portfolio (Tyler Munis, Infor Lawson, OpenGov, UKG Kronos) across Finance, HCM and Budget, starting with HR/payroll and capital asset tracking and depreciation off Lawson HCM (go-live required by end of 2029).
LOCATION / WORK MODEL
U.S.-based only (no offshore). Remote/hybrid is acceptable for appropriate activities as long as deliverables and responsiveness meet County expectations. Onsite presence is set by the County for each project phase and activity. Must be willing to travel as needed throughout the engagement.
KEY RESPONSIBILITIES- Define the security and compliance requirements for the ERP RFP's technical content, working with County Purchasing and the technology teams.
- Contribute security and compliance criteria to the evaluation, scoring and shortlisting materials, and assess vendor responses, demonstrations and references.
- Provide security input to the solution architecture, the integrations catalog and the API strategy.
- Provide security input to the data conversion and migration strategy for moving County data to the new ERP.
- Develop and approve security testing plans, and review results during end-to-end testing.
- Support security-related acceptance criteria in the SOW and contract review.
- Support security readiness for cutover/go-live and monitoring during stabilization.
REQUIRED QUALIFICATIONS- Experience defining security and compliance requirements for public sector ERP selection and implementation.
- Experience planning and overseeing security testing on ERP implementations.
- Public sector ERP experience (weighted highest in the client's evaluation) and a record of go-live and stabilization success on past ERP projects.
- Vendor-agnostic advisory capability across multiple ERP vendor ecosystems. Must be U.S.-based and willing to travel. Minimum years of experience: TBD (the client sets none).
PREFERRED QUALIFICATIONS / CERTIFICATIONS- Certifications related to security standards (e.g., ISO); the specific credential is TBD.
- Experience with North Carolina local governments, ideally a large county.
- Certifications: TBD (the client names no individual certifications). ERP vendor, cloud provider, security standards, ISO and CMMI credentials are a plus.
INDEPENDENCE REQUIREMENT (MUST-HAVE) MUST-HAVE: The candidate must be independent of ERP software vendors and system integrators. Candidates must disclose any vendor reseller or investment relationships, or system integrator partnerships, that could influence recommendations.
DURATION
The contract term is an initial 3 years plus two optional 1-year renewals (up to 5 years); the tentative HCM program runs through stabilization (target June 2030). Proposal stage; depends on contract award.