Director Cyber Security

This is a Management Service position that serves at the pleasure of the Appointing Authority.

GRADE

25

LOCATION OF POSITION

Maryland Department of Human Services

Office of Technology for Human Services (OTHS),

Cybersecurity Unit

25 S. Charles Street

Baltimore, MD 21201

Main Purpose of Job

Leads the OTHS Cybersecurity Unit as the Department's Chief Information Security Officer, setting security direction for all Department systems and data, including CSMS and CJAMS, with a collaborative approach that enables programs to operate securely rather than blocking them. Holds clear responsibility for the Department's technology-related audits, including the technology and information-related areas of agency and administration audits, audit readiness and security compliance. Ensures that security policy aligns with State requirements and is operationalized, that new services align with security requirements, and that partners receive consistent security guidance. Manages a cybersecurity roadmap that integrates State requirements with OTHS operational needs, delivering its projects and initiatives, including the critical ones set by the CIO. Represents the Department's security posture to executive management, the State CISO, the Office of the Governor, and federal and State partners.

POSITION DUTIES

• Sets the Department's security direction by maintaining security policy and standards aligned with State and federal requirements (DoIT Office of Security Management, IRS Publication 1075, SSA, HIPAA, CMS, NIST).
• Completes the cybersecurity components of the annual program self- assessment.
• Secure CIO approval and State concurrence on exceptions.
• Create and actively managing a cybersecurity plan and roadmap that integrates State requirements and OTHS operational needs and includes the plan for operationalizing security policies.
• Bring cybersecurity projects and initiatives to completion, including the critical projects identified by the CIO, with status reported to the CIO on a set cadence.
• Holds clear responsibility for the Department's technology- related audits, including the technology and information-related areas of agency and administration audits, audit readiness and security compliance, by maintaining control evidence, preparing required security reports and corrective action plans, running internal readiness reviews, leading the response to auditors, tracking compliance, and updating plans of action and milestones monthly until findings close.
• Establishes and leads a consultative security practice that partners with programs, technology teams, State contractors and vendors, and DoIT, enabling programs to operate securely rather than blocking them.
• Reviews new services for security alignment.
• Serves as the Department's security liaison to DoIT's Office of Security Management and the State CISO.
• Advises change and architecture governance without chairing or operating it.
• Owns vulnerability management and operational security monitoring across all Department applications, infrastructure and cloud environments, working in close collaboration with IT technical teams to operationalize remediation, by overseeing detection and vulnerability scanning tools, setting remediation priorities and deadlines, directing system owners and vendors to remediate findings, and tracking remediation to closure.

MINIMUM QUALIFICATIONS

Education: A bachelor's degree in cybersecurity, computer science, information technology, or a related field, or three additional years of qualifying experience in place of the degree.

Experience: Seven years of experience in cybersecurity, or in information technology with significant security responsibilities. Three years must have included direct supervision of professional cybersecurity staff. The experience must also include leading an enterprise security program, policy or compliance function, and must demonstrate working knowledge of multiple security disciplines, such as governance, risk and compliance; security operations; vulnerability management; and incident response.

DESIRED OR PREFERRED QUALIFICATIONS

The ideal candidate will possess the following:

• A current CISSP, or an equivalent security leadership certification from another recognized certifying authority, such as CISM (ISACA), CCISO (EC-Council) or GSLC (GIAC).
• Experience safeguarding federal tax information under IRS Publication 1075.
• Experience in State government or human services.
• Working knowledge of NIST CSF 2.0 and SP 800-53.

SPECIAL REQUIREMENTS

Consent to a State and FBI background check, including the screening required for access to federal tax information.

SELECTION PROCESS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date. We will not consider information submitted after this date. Successful candidates will be ranked as Best Qualified, Better Qualified, or Qualified and placed on the eligible (employment) list for at least one year.

If you are in State service and are a promotional candidate, your salary will be determined in accordance with State of Maryland guidelines.

EXAMINATION PROCESS

The examination will consist of a rating of your education, training, and experience as presented on your application and as they relate to the requirements of the position. You may be asked to complete a supplemental questionnaire. The supplemental questionnaire may be used as part of the rating process. Therefore, it is important that you provide complete and accurate information on your application.

For education obtained outside the U.S., a copy of the equivalent American education as determined by a foreign credential evaluation service is required prior to hire.

BENEFITS

As an employee of the State of Maryland, you will have access to outstanding benefits, including: health insurance, dental, and vision plans offered at a low cost. CLICK ON THIS LINK FOR MORE DETAILS: STATE OF MARYLAND BENEFITS.

• Personal Leave - new State employees are awarded six (6) personnel days annually (prorated based on start date).
• Annual Leave - ten (10) days of accumulated annual leave per year.
• Sick Leave - fifteen (15) days of accumulated sick leave per year.
• Holidays - State employees also celebrate at least thirteen (13) holidays per year.
• Pension - State employees earn credit towards a retirement pension.
• Positions may be eligible for telework.

FURTHER INSTRUCTIONS

The online application process is STRONGLY preferred. If you are unable to apply online, you may mail a paper application and supplemental questionnaire to, Maryland Department of Human Services, Employment Services, Attention: Kendra Young, 25 South Charles St, Room 1116-L, Baltimore, Maryland 21201.

If you have any questions concerning the recruitment process for this position, please email Kendra Young at kendra.young2@maryland.gov; include the job title and recruitment # in the subject line.

If you are having difficulty with your user account or have general questions about the online application system, please contact the MD Department of Budget and Management, Recruitment and Examination Division, at 410-767-4850 or Application.Help@maryland.gov.

TTY Users: call via Maryland Relay.