Director Cyber Security (PROGRAM MANAGER SENIOR III)

Introduction

\r\n�\r\nWhen you join the Maryland Department of Human Services (DHS), you join a team of more than 5,000 employees across the state dedicated to positively changing the lives of more than 1 million Marylanders each year. We do this by providing economic support, preventive services, and caring for children and adults.\r\n\r\n�\r\nWe aim to deliver services so that we more quickly meet the needs of the people we serve. At DHS, we grapple with hard questions to find new ways to foster a culture of bold innovation. We do this to ensure that in Maryland, we leave no one behind.�\r\n\r\n\r\nThis is a Management Service position that serves at the pleasure of the Appointing Authority.\r\n

GRADE

25\r\n

LOCATION OF POSITION

Maryland Department of Human Services\r\nOffice�of Technology for Human Services (OTHS),\r\nCybersecurity Unit\r\n25 S. Charles Street\r\nBaltimore, MD 21201\r\n

Main Purpose of Job

Leads the OTHS Cybersecurity Unit as the Department’s Chief Information Security Officer, setting security direction for�all Department systems and data, including CSMS and CJAMS, with a collaborative approach that enables programs to�operate securely rather than blocking them. Holds clear responsibility for the Department’s technology-related audits,�including the technology and information-related areas of agency and administration audits, audit readiness and�security compliance. Ensures that security policy aligns with State requirements and is operationalized, that new�services align with security requirements, and that partners receive consistent security guidance. Manages a�cybersecurity roadmap that integrates State requirements with OTHS operational needs, delivering its projects and�initiatives, including the critical ones set by the CIO. Represents the Department’s security posture�to executive�management, the State CISO, the Office of the Governor, and federal and State partners.\r\n

POSITION DUTIES

\r\n\r\n Sets the Department’s security direction by maintaining�security policy and standards aligned with State and federal�requirements (DoIT Office of Security Management, IRS�Publication 1075, SSA, HIPAA, CMS, NIST).\r\n Completes the�cybersecurity components of the annual program self-�assessment.�\r\n Secure CIO approval and State concurrence on�exceptions.\r\n Create and actively managing a cybersecurity�plan and roadmap that integrates State requirements and�OTHS operational needs and includes the plan for�operationalizing security policies.�\r\n Bring cybersecurity�projects and initiatives to completion, including the critical�projects identified by the CIO, with status reported to the CIO�on a set cadence.\r\n Holds clear responsibility for the Department’s technology-�related audits, including the technology and information-related areas of agency and administration audits, audit�readiness and security compliance, by maintaining control�evidence, preparing required security reports and corrective�action plans, running internal readiness reviews, leading the�response to auditors, tracking compliance, and updating�plans of action and milestones monthly until findings close.\r\n Establishes and leads a consultative security practice that�partners with programs, technology teams, State contractors�and vendors, and DoIT, enabling programs to operate�securely rather than blocking them.�\r\n Reviews new services for�security alignment.�\r\n Serves as the Department’s security�liaison to DoIT’s Office of Security Management and the State�CISO.�\r\n Advises change and architecture governance�without chairing or operating it.\r\n Owns vulnerability management and operational security�monitoring across all Department applications,�infrastructure and cloud environments, working in close�collaboration with IT technical teams to operationalize�remediation, by overseeing detection and vulnerability�scanning tools, setting remediation priorities and deadlines,�directing system owners and vendors to remediate findings,�and tracking remediation to closure.\r\n\r\n\r\n

MINIMUM QUALIFICATIONS

Education: A bachelor’s degree in cybersecurity, computer science, information technology, or a related field, or three additional years of qualifying experience in place of the degree.\r\nExperience: Seven years of experience in cybersecurity, or in information technology with significant security responsibilities. Three years must have included direct supervision of professional cybersecurity staff. The experience must also include leading an enterprise security program, policy or compliance function, and must demonstrate working knowledge of multiple security disciplines, such as governance, risk and compliance; security operations; vulnerability management; and incident response.\r\n

DESIRED OR PREFERRED QUALIFICATIONS

The ideal candidate will possess the following:\r\n\r\n\r\n A current CISSP, or an equivalent security leadership certification from another recognized certifying authority, such as CISM (ISACA), CCISO (EC-Council) or GSLC (GIAC).\r\n Experience safeguarding federal tax information under IRS Publication 1075.\r\n Experience in State government or human services.\r\n Working knowledge of NIST CSF 2.0 and SP 800-53.\r\n \r\n \r\n

SPECIAL REQUIREMENTS

Consent to a State and FBI background check, including the screening required for access to federal tax information.\r\n

SELECTION PROCESS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date. We will not consider information submitted after this date. Successful candidates will be ranked as Best Qualified, Better Qualified, or Qualified and placed on the eligible (employment) list for at least one year.\r\nIf you are in State service and are a promotional candidate, your salary will be determined in accordance with State of Maryland guidelines.\r\n

EXAMINATION PROCESS

The examination will consist of a rating of your education, training, and experience as presented on your application and as they relate to the requirements of the position. You may be asked to complete a supplemental questionnaire.� The supplemental questionnaire may be used as part of the rating process.� Therefore, it is important that you provide complete and accurate information on your application.\r\n\r\n\r\nFor education obtained outside the U.S., a copy of the equivalent American education as determined by a foreign credential evaluation service is required prior to hire.\r\n

BENEFITS

As an employee of the State of Maryland, you will have access to outstanding benefits, including: health insurance, dental, and vision plans offered at a low cost.� CLICK ON THIS LINK FOR MORE DETAILS:��STATE OF MARYLAND BENEFITS.\r\n\r\n Personal Leave - new State employees are awarded six (6) personnel days annually (prorated based on start date).\r\n Annual Leave - ten (10) days of accumulated annual leave per year.\r\n Sick Leave - fifteen (15) days of accumulated sick leave per year.��\r\n Holidays - State employees also celebrate at least thirteen (13) holidays per year.��\r\n Pension - State employees earn credit towards a retirement pension.\r\n Positions may be eligible for telework.\r\n\r\n

FURTHER INSTRUCTIONS

The online application process is STRONGLY preferred. If you are unable to apply online, you may mail a paper application and supplemental questionnaire to, Maryland Department of Human Services, Employment Services, Attention: Kendra Young, 25 South Charles St, Room 1116-L, Baltimore, Maryland 21201.\r\nIf you have any questions concerning the recruitment process for this position, please email Kendra Young at kendra.young2@maryland.gov; include the job title and recruitment # in the subject line.\r\n\r\n\r\nIf you are having difficulty with your user account or have general questions about the online application system, please contact the MD Department of Budget and Management, Recruitment and Examination Division, at 410-767-4850 or Application.Help@maryland.gov.\r\n\r\n\r\nTTY Users: call via Maryland Relay.\r\n\r\n\r\nAs an equal opportunity employer, Maryland is committed to recruiting, retaining and promoting employees who are reflective of the State’s diversity. People with disabilities and bilingual candidates are encouraged to apply. We thank our Veterans for their service to our country.\r\n