Director Cyber Security (PROGRAM MANAGER SENIOR III)

Maryland; Baltimore (MD); On-site; USD 150,000 - 230,000; Full time

Job summary

Maryland Department of Human Services in Baltimore seeks a Chief Information Security Officer to lead the OTHS Cybersecurity Unit, setting security direction for all Department systems and data, including policy alignment with State requirements.

This executive role oversees audits, vulnerability management, and security programs, reporting to the CIO and coordinating with DoIT, the Governor’s office, and federal partners to maintain a secure, compliant technology environment.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, or 7+ years related security experience.
• 7+ years of cybersecurity/IT with significant security responsibilities including leadership.
• Experience leading enterprise security programs, policy or compliance functions.

Responsibilities

• Sets security direction by maintaining policy and standards aligned with State and federal requirements.
• Manages a cybersecurity plan and roadmap integrating State requirements with operational needs.
• Oversees audits, evidence, reports, and corrective action plans; maintains remediation tracking.
• Leads a consultative security practice partnering with programs, vendors, and DoIT.
• Owns vulnerability management and monitoring across all Department apps and cloud environments.

Skills

Security leadership

Governance & compliance

Risk assessment

Incident response

Vulnerability management

Education

Bachelor's degree in cybersecurity, computer science, information technology

Tools

CISSP

NIST CSF

IRS Publication 1075 experience

DoIT security standards

Job description

Introduction

When you join the Maryland Department of Human Services (DHS), you join a team of more than 5,000 employees across the state dedicated to positively changing the lives of more than 1 million Marylanders each year. We do this by providing economic support, preventive services, and caring for children and adults.

We aim to deliver services so that we more quickly meet the needs of the people we serve. At DHS, we grapple with hard questions to find new ways to foster a culture of bold innovation. We do this to ensure that in Maryland, we leave no one behind.

This is a Management Service position that serves at the pleasure of the Appointing Authority.

GRADE

25

LOCATION OF POSITION

Maryland Department of Human Services Office of Technology for Human Services (OTHS), Cybersecurity Unit, 25 S. Charles Street, Baltimore, MD 21201

Main Purpose of Job

Leads the OTHS Cybersecurity Unit as the Department’s Chief Information Security Officer, setting security direction for all Department systems and data, including CSMS and CJAMS, with a collaborative approach that enables programs to operate securely rather than blocking them. Holds clear responsibility for the Department’s technology-related audits, including the technology and information-related areas of agency and administration audits, audit readiness and security compliance. Ensures that security policy aligns with State requirements and is operationalized, that new services align with security requirements, and that partners receive consistent security guidance. Manages a cybersecurity roadmap that integrates State requirements with OTHS operational needs, delivering its projects and initiatives, including the critical ones set by the CIO. Represents the Department’s security posture to executive management, the State CISO, the Office of the Governor, and federal and State partners.

POSITION DUTIES

• Sets the Department’s security direction by maintaining security policy and standards aligned with State and federal requirements (DoIT Office of Security Management, IRS Publication 1075, SSA, HIPAA, CMS, NIST).
• Completes the cybersecurity components of the annual program self-assessment.
• Secure CIO approval and State concurrence on exceptions.
• Create and actively managing a cybersecurity plan and roadmap that integrates State requirements and OTHS operational needs and includes the plan for operationalizing security policies.
• Bring cybersecurity projects and initiatives to completion, including the critical projects identified by the CIO, with status reported to the CIO on a set cadence.
• Holds clear responsibility for the Department’s technology-related audits, including the technology and information-related areas of agency and administration audits, audit readiness and security compliance, by maintaining control evidence, preparing required security reports and corrective action plans, running internal readiness reviews, leading the response to auditors, tracking compliance, and updating plans of action and milestones monthly until findings close.
• Establishes and leads a consultative security practice that partners with programs, technology teams, State contractors and vendors, and DoIT, enabling programs to operate securely rather than blocking them.
• Reviews new services for security alignment.
• Serves as the Department’s security liaison to DoIT’s Office of Security Management and the State CISO.
• Advises change and architecture governance without chairing or operating it.
• Owns vulnerability management and operational security monitoring across all Department applications, infrastructure and cloud environments, working in close collaboration with IT technical teams to operationalize remediation, by overseeing detection and vulnerability scanning tools, setting remediation priorities and deadlines, directing system owners and vendors to remediate findings, and tracking remediation to closure.

MINIMUM QUALIFICATIONS

Education: A bachelor’s degree in cybersecurity, computer science, information technology, or a related field, or three additional years of qualifying experience in place of the degree. Experience: Seven years of experience in cybersecurity, or in information technology with significant security responsibilities. Three years must have included direct supervision of professional cybersecurity staff. The experience must also include leading an enterprise security program, policy or compliance function, and must demonstrate working knowledge of multiple security disciplines, such as governance, risk and compliance; security operations; vulnerability management; and incident response.

DESIRED OR PREFERRED QUALIFICATIONS

• A current CISSP, or an equivalent security leadership certification from another recognized certifying authority, such as CISM (ISACA), CCISO (EC-Council) or GSLC (GIAC).
• Experience safeguarding federal tax information under IRS Publication 1075.
• Experience in State government or human services.
• Working knowledge of NIST CSF 2.0 and SP 800-53.

SPECIAL REQUIREMENTS

Consent to a State and FBI background check, including the screening required for access to federal tax information.

SELECTION PROCESS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date. We will not consider information submitted after this date. Successful candidates will be ranked as Best Qualified, Better Qualified, or Qualified and placed on the eligible (employment) list for at least one year. If you are in State service and a promotional candidate, your salary will be determined in accordance with State of Maryland guidelines.

EXAMINATION PROCESS

The examination will consist of a rating of your education, training, and experience as presented on your application and as they relate to the requirements of the position. You may be asked to complete a supplemental questionnaire. The supplemental questionnaire may be used as part of the rating process. Therefore, it is important that you provide complete and accurate information on your application.

For education obtained outside the U.S., a copy of the equivalent American education as determined by a foreign credential evaluation service is required prior to hire.

BENEFITS

• Personal Leave - new State employees are awarded six (6) personnel days annually (prorated based on start date).
• Annual Leave - ten (10) days of accumulated annual leave per year.
• Sick Leave - fifteen (15) days of accumulated sick leave per year.
• Holidays - State employees also celebrate at least thirteen (13) holidays per year.
• Pension - State employees earn credit towards a retirement pension.

Positions may be eligible for telework.

DEI & INCLUSION

As an equal opportunity employer, Maryland is committed to recruiting, retaining and promoting employees who are reflective of the State’s diversity. People with disabilities and bilingual candidates are encouraged to apply. We thank our Veterans for their service to our country.