Operational Technology Cyber Security Manager (Systems Analyst)

Anne Arundel County – Public Works Department; Annapolis (MD); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

On-call availability

Background check

Job summary

Anne Arundel County – Public Works Department is seeking an OT Cyber Security Manager (Systems Analyst) to lead digital defense operations and protect county infrastructure. The role collaborates with all divisions and the Office of Information Technology to manage risk and ensure regulatory compliance.

The position requires hands-on security management across endpoint protection, vulnerability management, email security, and security awareness.

Qualifications

• Requires a four-year degree in a related field with specialized training in data processing, programming, operations or related areas; plus 6+ years of EDP systems analysis and design experience.
• Hands-on cyber security experience is required (5+ years).
• Two+ years in vulnerability management, incident response, and endpoint detection and response.

Responsibilities

• Monitor incoming event queues for potential security incidents.
• Triage security events by severity, impact, and risk.
• Administer security platforms, onboard users, configure policies, and troubleshoot issues.
• Utilize vulnerability management to identify and assess vulnerabilities across assets.
• Support lifecycle of vulnerability management including remediation and reporting.
• Collaborate with IT to remediate findings and harden endpoints.
• Participate in incident response and security awareness training.

Skills

Security monitoring

Incident response

Vulnerability management

Endpoint security

Security awareness

Risk assessment

Cross-team collaboration

Education

Bachelor's degree in mathematics, public administration, business administration, or related field

Tools

Vulnerability management platform

Endpoint security tools

Email security tools

Incident management system

Job description

Public Works OT Cyber Security Manager (Systems Analyst) is responsible for the department’s digital defense operations. They will lead the Department to protect infrastructure, manage risk, and ensure compliance with regulatory standards. The position will be highly collaborative, working with all Public Works Divisions and the Office of Information Technology.

NATURE AND VARIETY OF WORK

The employee in this role is crucial for safeguarding county resources and minimizing security breaches. They achieve this by managing and monitoring various security platforms, including those for endpoint security, vulnerability management, email security, vendor risk assessment, and security awareness. Their primary objective is to ensure adequate protection for county assets, data, and employees. The work is primarily sedentary and performed in an office environment. However, the work does involve some walking, standing, bending, stooping, lifting, and bending when installing, moving, and repairing computers or peripherals. The employee may be required to lift equipment weighing fifty pounds or more. Employees may also be required to work nights, weekends, and holidays.

Examples of Duties and Knowledge, Skills and Abilities:

(Note: The duties and responsibilities enumerated in this class specification are for the purpose of determining a common set of minimum qualifications and salary level for all positions in this class. They are not intended to include all of the essential functions of all positions in the class.)

• Monitor incoming event queues for potential security incidents
• Prioritize and triage security events based on severity, potential impact, and risk factors.
• Administer security platforms, including onboarding users, reviewing alerts, taking necessary actions based on identified threats, configuring policies, and troubleshooting issues
• Leverage the vulnerability management platform to identify and assess vulnerabilities across network and infrastructure assets
• Support the broader vulnerability management lifecycle, including prioritization, reporting, and remediation
• Collaborate with IT teams to remediate findings and harden endpoint configurations
• Participate in incident response activities as part of the designated incident response team
• Conduct security awareness training and phishing campaigns
• Assist with the development of security standards, policies, and procedures
• Stay up-to-date on the latest cyber threats, vulnerabilities, and security trends
• Create, manage, and dispatch incident tickets
• Additional tasks include but are not limited to the following areas: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security,
• Identity and Access Management, Security Assessment and Testing, and Security Operations
• Perform related duties as required

Graduation from an accredited four-year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations and methodologies; and six (6) or more years of experience in electronic data processing systems analysis and design.

Note: Accredited University or College is the recognition from an accrediting agency that an institution maintains a certain level of educational standards. The U.S. Department of Education maintains a database of accrediting agencies it recognizes for schools within the United States. For a University or College outside the United States, the applicant must provide documentation of accreditation and educational equivalency, which can be accomplished through a credential evaluation service. Applicants with a foreign degree must provide this documentation upon the close of the announcement.

Note: 24/7 On-Call Availability Required

Note: Background Check Required

• Five (5) or more years of hands‑on experience in Cyber Security. Note: Hands‑on is work experience, not experience gained through education.
• Two or more years of experience in Vulnerability Management
• Two or more years of experience in Incident Response
• Two or more years of experience in Endpoint Detection and Response
• Specialized training in Cybersecurity, Risk Management, Server Security, Network Security, or Cloud Security.