Cybersecurity & Privacy Technology Manager

Jobtailor; Baltimore (MD); On-site; USD 92,000 - 132,000; Full time

Job summary

Jobtailor is seeking a cybersecurity professional to monitor ISACs/SOCs and news for vulnerabilities impacting USM organizations. You will select and operate vulnerability management tools, assist with vulnerabilities across networks, and advise on physical security solutions.

The role involves coordinating systemwide ISAC/SOC activities, researching best practices, and managing vendor relationships. Responsibilities include incident response support, security tool operation, and collaboration

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or closely related field.
• Three years of progressively responsible cybersecurity experience with at least two areas from the listed domains.
• Experience with vulnerability management, threat monitoring, security operations, incident response, or third‑party risk.

Responsibilities

• Monitors ISACs/SOCs, vendor news, and media for vulnerabilities impacting USM organizations.
• Selects, implements, and operates vulnerability and threat management tools.
• Assists institutions with addressing vulnerabilities across networks, servers, and endpoints.
• Advises on video surveillance and physical security solutions.
• Drafts notices and presentations to inform institutions of threats and vulnerabilities.
• Supports the development and operation of a systemwide ISAC/SOC function.
• Researches best practices and identifies technical solutions for security requirements.
• Provides project management for USM cybersecurity and privacy projects.
• Maintains cybersecurity and privacy vendor relationships and participates in tool selection.

Skills

Vulnerability management

Threat intelligence

Security operations

Incident response

Third-party risk

Security tools

Communication

Collaboration

Education

Bachelor’s degree in Cybersecurity or related field

Equivalent combination of education and experience

Tools

EDR

Vulnerability scanner

SIEM

Ticketing systems

Job description

Responsibilities

• Monitors relevant Information Sharing and Analysis Centers (ISACs), Security Operations Centers (SOCs), vendor news, and the media reports for any vulnerabilities that could impact a USM organization.
• Selects, implements, and operates the USM vulnerability and threat management tools and systems.
• Assists institutions with addressing any relevant vulnerabilities across all networks, servers, and endpoints.
• Advises institutions on video surveillance and physical security solutions.
• Drafts notices, makes presentations, and ensures that all institutions are aware of any relevant threats and vulnerabilities to their environment.
• Assists in the development, implementation, and operation of a systemwide ISAC/SOC function.
• Researches and assists institutions with implementing any technical best practices in their environments.
• Identifies technical solutions that could address security and privacy requirements.
• Provides project management expertise to USM cybersecurity and privacy projects.
• Establishes and maintains relevant cybersecurity and privacy vendor relationships.
• Assists in the selection, implementation and operation of systemwide cybersecurity and privacy tools.
• Attends meetings and assists with the activities of the USM Privacy Council and USM Security Council.
• Provides technical and forensic assistance with incident and breach response.
• Performs cybersecurity and privacy reviews of 3rd party solutions.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a closely related field.
• An equivalent combination of related education and experience may be considered, based on a substitution rate of one year of full-time relevant experience for 30 undergraduate credits, or vice versa.
• Three (3) years of progressively responsible experience in cybersecurity, with demonstrated responsibility in at least two of the following areas:
• Vulnerability management (enterprise scanning, remediation coordination, patch/vuln lifecycle)
• Threat intelligence/monitoring (ISAC/SOC feeds, vendor advisories, triage)
• Security operations / SOC support (alerts, tooling, detection support)
• Incident response and basic forensics (containment support, evidence handling, log review)
• Third‑party risk/security reviews (vendor assessments, security/privacy requirements)
• Security tool implementation/operations (EDR, vuln scanner, SIEM, ticketing workflow)
• Knowledge of information security and privacy best practices, including operational controls, risk management, and governance processes.
• Knowledge of applicable federal, state, and industry cybersecurity and privacy standards relevant to USM.
• Knowledge of the cybersecurity and privacy technology landscape, including current and emerging hardware, software, and service solutions.
• Skill in implementing, operating, and supporting enterprise technology environments, including platforms and services from vendors such as Microsoft, Google, and Apple.
• Skill working with diverse technical environments, including mobile devices, data center infrastructure, physical security technologies, and intrusion detection/prevention systems.
• Skill in analyzing security and privacy requirements and identifying appropriate technical solutions to meet organizational needs.
• Ability to remain calm and effective in high‑pressure or conflict situations, including during security incidents.
• Ability to collaborate effectively and facilitate consensus among technical and non‑technical stakeholders.
• Ability to adapt to changing priorities and ambiguous environments while maintaining effectiveness, momentum, and professionalism.
• Strong interpersonal and communication abilities, including building relationships, preparing and delivering presentations, and communicating complex technical concepts to varied audiences.

Core Competencies

Demonstrates expertise in cybersecurity and privacy management, including vulnerability management, incident response, and security tool implementation. Proficient in collaborating with diverse stakeholders and adapting to dynamic environments while ensuring compliance with relevant standards.