CISO: Enterprise Cyber Risk & Strategy

The Maryland-National Capital Park & Planning Commission; Riverdale Park (MD); On-site; USD 180,000 - 240,000; Full time

Job summary

The Maryland-National Capital Park and Planning Commission is seeking a Corporate Information Security Chief to provide strategic leadership over the enterprise cybersecurity program, aligning governance, risk management, and security operations with organizational objectives.

The role directs security strategy, risk assessment, and audit activities, interfacing with CIO and executive committees to drive secure, resilient public services while balancing departmental independence across counties.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a closely related field.
• Eight (8) years of progressively responsible information technology security experience.
• An equivalent combination of education and experience may be substituted, which together total twelve (12) years.
• Information security certification(s) is desired; such as, CISSP, CISM, CRISC, CGEIT, CCSP, CISA, GIAC, or CEH.

Responsibilities

• Develop, implement, and maintain a multi-year, risk-based enterprise cybersecurity strategy and roadmap aligned with organizational goals, business objectives, and risk tolerance.
• Advise executive leadership on security posture, risks, remediation priorities, and investment decisions.
• Lead cybersecurity audits, regulatory reviews, and third-party risk assessments to ensure compliance and resilience.

Skills

Executive leadership

Governance frameworks

Risk management

NIST CSF 2.0

Incident response

Education

Bachelor's degree in cybersecurity/IT/CS/IS/Engineering

Master's degree preferred

Job description

The Maryland-National Capital Park and Planning Commission is seeking a Corporate Information Security Chief to provide strategic leadership over the enterprise cybersecurity program, aligning governance, risk management, and security operations with organizational objectives.

The role directs security strategy, risk assessment, and audit activities, interfacing with CIO and executive committees to drive secure, resilient public services while balancing departmental independence across counties.