Cybersecurity & Privacy Technology Manager

University System of Maryland Office; Baltimore (MD); On-site; USD 152,250 - 172,550; Full time

Benefits offered by this job

Paid leave: 22 days

Health benefits

Retirement plans

Life insurance

Tuition benefits

Training & development

Credit union access

EAP

Job summary

University System of Maryland Office seeks a Cybersecurity & Privacy Technology Manager to strengthen security and privacy across USM. You will partner with the Chief Information Security and Privacy Officer to manage vulnerability/threat programs, guide risk reduction, and support incident response and third‑party reviews.

Responsibilities span selecting and operating tools, coordinating across institutions, and advancing a systemwide ISAC/SOC function, along with vendor relationships and

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a closely related field.
• An equivalent combination of related education and experience may be considered, based on a substitution rate of one year of full‑time relevant experience for 30 undergraduate credits, or vice versa.
• Three (3) years of progressively responsible experience in cybersecurity, with demonstrated responsibility in at least two of the following areas:
• Vulnerability management (enterprise scanning, remediation coordination, patch/vuln lifecycle)
• Threat intelligence/monitoring (ISAC/SOC feeds, vendor advisories, triage)
• Security operations / SOC support (alerts, tooling, detection support)
• Incident response and basic forensics (containment support, evidence handling, log review)
• Third‑party risk/security reviews (vendor assessments, security/privacy requirements)
• Security tool implementation/operations (EDR, vuln scanner, SIEM, ticketing workflow)
• Knowledge of information security and privacy best practices, including operational controls, risk management, and governance processes.

Responsibilities

• Manage USM’s Vulnerability and Threat Management Program, monitoring ISACs/SOCs and vendor news.
• Select and operate USM vulnerability and threat management tools and systems.
• Assist institutions with addressing vulnerabilities across networks, servers, and endpoints.
• Advise on video surveillance and physical security solutions.
• Draft notices and presentations to inform institutions of threats and vulnerabilities.
• Develop and operate a systemwide ISAC/SOC function.
• Provide technical program support for cybersecurity/privacy projects.
• Establish and maintain cybersecurity/privacy vendor relationships.
• Assist in selecting, implementing, and operating systemwide cybersecurity/privacy tools.
• Attend meetings and support USM Privacy/Security Councils.
• Provide technical and forensic assistance with incident and breach response.
• Perform cybersecurity/privacy reviews of third‑party solutions.

Skills

Vulnerability management

Threat intelligence

Security operations

Incident response

Third‑party risk

Security tool implementation

Communication

Collaboration

Education

Bachelor’s degree in Cybersecurity/Information Systems/CS/IT/Engineering

Tools

EDR

SIEM

Vulnerability scanner

Job description

Due date for applications: Friday, August 7, 2026

PURPOSE OF POSITION:

The Cybersecurity & Privacy Technology Manager plays a key role in strengthening cybersecurity and privacy across the University System of Maryland (USM). Working with the Chief Information Security and Privacy Officer and partners across USM institutions, this position helps manage vulnerability and threat response efforts, supports the implementation of cybersecurity and privacy technologies, provides technical guidance on risk reduction strategies, and assists with incident response and third-party security reviews.

RESPONSIBILITIES:

Management of the USM’s Vulnerability and Threat Management Program:

• Monitors relevant Information Sharing and Analysis Centers (ISACs), Security Operations Centers (SOCs), vendor news, and the media reports for any vulnerabilities that could impact a USM organization.
• Selects, implements, and operates the USM vulnerability and threat management tools and systems.
• Assists institutions with addressing any relevant vulnerabilities across all networks, servers, and endpoints.
• Advises institutions on video surveillance and physical security solutions.
• Drafts notices, makes presentations, and ensures that all institutions are aware of any relevant threats and vulnerabilities to their environment.
• Assists in the development, implementation, and operation of a systemwide ISAC/SOC function.

Cybersecurity and Privacy Technical Program Support:

• Researches and assists institutions with implementing any technical best practices in their environments.
• Identifies technical solutions that could address security and privacy requirements.
• Provides project management expertise to USM cybersecurity and privacy projects.
• Establishes and maintains relevant cybersecurity and privacy vendor relationships.
• Assists in the selection, implementation and operation of systemwide cybersecurity and privacy tools.
• Attends meetings and assists with the activities of the USM Privacy Council and USM Security Council.

Incident Response and Security Assurance Support:

• Provides technical and forensic assistance with incident and breach response.
• Performs cybersecurity and privacy reviews of 3rd party solutions.

ANNUAL SALARY:

$152,250 to $172,550

MINIMUM QUALIFICATIONS:

Required Education Level/Certifications:

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a closely related field.

An equivalent combination of related education and experience may be considered, based on a substitution rate of one year of full‑time relevant experience for 30 undergraduate credits, or vice versa.

Required Experience:

Three (3) years of progressively responsible experience in cybersecurity, with demonstrated responsibility in at least two of the following areas:

• Vulnerability management (enterprise scanning, remediation coordination, patch/vuln lifecycle)
• Threat intelligence/monitoring (ISAC/SOC feeds, vendor advisories, triage)
• Security operations / SOC support (alerts, tooling, detection support)
• Incident response and basic forensics (containment support, evidence handling, log review)
• Third‑party risk/security reviews (vendor assessments, security/privacy requirements)
• Security tool implementation/operations (EDR, vuln scanner, SIEM, ticketing workflow)

Required Knowledge/Skills/Abilities:

• Knowledge of information security and privacy best practices, including operational controls, risk management, and governance processes.
• Knowledge of applicable federal, state, and industry cybersecurity and privacy standards relevant to USM.
• Knowledge of the cybersecurity and privacy technology landscape, including current and emerging hardware, software, and service solutions.
• Skill in implementing, operating, and supporting enterprise technology environments, including platforms and services from vendors such as Microsoft, Google, and Apple.
• Skill working with diverse technical environments, including mobile devices, data center infrastructure, physical security technologies, and intrusion detection/prevention systems.
• Skill in analyzing security and privacy requirements and identifying appropriate technical solutions to meet organizational needs.
• Ability to remain calm and effective in high‑pressure or conflict situations, including during security incidents.
• Ability to collaborate effectively and facilitate consensus among technical and non‑technical stakeholders.
• Ability to adapt to changing priorities and ambiguous environments while maintaining effectiveness, momentum, and professionalism.
• Strong interpersonal and communication abilities, including building relationships, preparing and delivering presentations, and communicating complex technical concepts to varied audiences.

PREFERRED QUALIFICATIONS:

Preferred Education Level/Certifications:

Advanced degree in Cybersecurity, Information Security / Information Systems, Computer Science, Information Technology, Risk Management, Public Policy, Legal Studies, or a related discipline with demonstrated cybersecurity/privacy focus.

Preferred Experience:

Experience in a cybersecurity and/or privacy role within higher education or the University System of Maryland.

• Paid Leave: 22 days of annual leave, 15 days of sick & safe leave, 16-17 holidays, 3 personal leave days, 12 weeks paid family medical leave.
• Health Benefits: Comprehensive medical, dental, and vision coverage with flexible spending accounts.
• Retirement Plans: Mandatory and supplemental options with major providers like Fidelity and TIAA.
• Life Insurance: Optional term life and AD&D benefits through MetLife.
• Tuition Benefits: Tuition remission for employees and their families.
• Training & Development: Free professional development conferences and unlimited LinkedIn Learning access.
• Credit Union Access: Membership eligibility for SECU, Maryland’s largest credit union.
• Employee Assistance Program (EAP): Free counseling, legal, financial, and work-life support services.

Click to learn more.