SECURITY AND PRIVACY OFFICER (Administrative Program Manager IV)

Maryland AG; Baltimore (MD); Presencial; USD 90.000 - 120.000; Jornada completa

Descripción de la vacante

Maryland Department of Juvenile Services (DJS) seeks a Security and Privacy Officer (Administrative Program Manager IV) to lead cybersecurity and privacy efforts. Reporting to the CIO, this role coordinates security operations, risk assessments, and privacy program activities across IT infrastructure, applications, and data handling.

You will develop policies, conduct PIAs, manage compliance with NIST CSF and SP 800-53, participate in statewide governance, and advise leadership on privacy, data

Formación

• Five (5) years of information security or privacy risk work.
• Experience applying cybersecurity frameworks in the public sector.
• Ability to lead cross-agency security initiatives.

Responsabilidades

• Serve as cybersecurity and privacy lead for DJS, reporting to CIO.
• Develop and maintain privacy policies, procedures, and standards.
• Conduct Privacy Impact Assessments for systems and data usage.
• Coordinate privacy incident response and breach notification obligations.
• Advise leadership on data minimization, retention, and disposal practices.

Conocimientos

InfoSec

Cyber risk

Privacy program

Security compliance

NIST CSF

PIA process

Educación

Bachelor’s degree in IT or Cyber

Descripción del empleo

Introduction

This Management Service position serves at the Appointing Authority's pleasure. A resume must accompany your completed application.

GRADE

22

Location of Position

DJS Headquarters – Information Technology Unit
(Baltimore City)
Baltimore, MD

Main Purpose of Job

Join Us in Making a Difference at DJS! The Maryland Department of Juvenile Services (DJS) is dedicated to transforming young lives, creating safer communities, and fostering equitable systems. We are seeking passionate individuals for the role of Security and Privacy Officer (Administrative Program Manager IV), so come join our team and make a meaningful impact on our youth and the staff community at DJS! The Security and Privacy Officer serves as the dedicated cybersecurity and privacy lead for DJS. Reporting directly to the Chief Information Officer (CIO), this position provides day-to-day security engagement with DJS's infrastructure, platforms, and internal operations. The role functions as DJS's empowered Information Security Officer and designated Agency Privacy Officer (APO), ensuring the department meets its cybersecurity and privacy obligations distinct from the Office of Security Management's (OSM) statewide mandate. As the designated APO, the role performs privacy functions to support DJS's privacy risk management framework.

Key Responsibilities

• Agency Security Operations and Engagement – Serving as the primary day-to-day cybersecurity point of contact for DJS divisions, including Platform and Client Services, Infrastructure, and Digital Experience, by providing security guidance, risk advisories, and operational support; conducting security assessments of systems, infrastructure, and applications; reviewing projects and procurements for security requirements; monitoring security metrics and reporting on security posture, incident trends, and remediation progress; and coordinating with OSM's Cyber Technology Directorate to support the adoption and effective use of centralized cybersecurity platforms and services.
• Privacy Officer Functions – Serving as the designated Agency Privacy Officer (APO) for the Department of Information Technology; developing and maintaining DJS-specific privacy policies, procedures, and standards aligned with statewide frameworks; conducting Privacy Impact Assessments (PIAs) for systems, applications, and data use and sharing arrangements involving personally identifiable information (PII) or Personal Information (PI); coordinating privacy incident response and breach notification obligations; and advising leadership on data minimization, retention, and disposal practices.
• Cybersecurity Agency Compliance and Risk Management – Managing DJS’s cybersecurity compliance with applicable frameworks, including the NIST Cybersecurity Framework (CSF), NIST SP 800-53, and Maryland statewide security policies; maintaining a DJS-specific risk register, tracking risk treatment plans and remediation timelines in coordination with OSM's Governance, Risk, and Compliance (GRC) functions, and reporting status to the State CISO; aligning internal compliance activities with statewide audit and assessment cycles; coordinating responses to cybersecurity and privacy findings; and maintaining clear accountability between this position’s cybersecurity and privacy compliance responsibilities and the DJS Compliance Officer’s IT, financial, and performance compliance responsibilities.
• Coordination, Governance Participation, and Program Support – Representing DJS on statewide governance boards, such as the Cyber Security Coordinating Council; collaborating with OSM directorates, including Cyber Technology, Cyber Resilience, GRC, State Privacy, and State and Local Cybersecurity, to integrate DJS-specific security and privacy activities into the statewide program; and supporting the CIO with analysis, briefing materials, and situational awareness on security and privacy matters for executive leadership reporting.
• Other Duties as Assigned – Performing other duties as assigned by the Chief Information Officer.

Minimum Qualifications

Experience: Five (5) years of professional experience performing information security, cybersecurity risk assessment, security compliance monitoring, privacy risk management, or information technology risk and compliance activities.

Note: Candidates may substitute a Bachelor's degree from an accredited college or university in information technology, cybersecurity, computer science, information systems, or a closely related field for three (3) years of the required experience.

Desired or Preferred Qualifications

• Experience applying cybersecurity frameworks and standards to security assessments, risk mitigation, and compliance activities, preferably in a public-sector or government environment.
• Experience supporting or implementing privacy program activities, including privacy assessments, privacy incident response, data protection practices, or the development and maintenance of privacy policies and procedures.
• Possess any relevant professional certifications or specialized training in cybersecurity, information security, or privacy, or risk management.

As an equal-opportunity employer, Maryland is committed to recruiting, retaining, and promoting employees who are reflective of the State’s diversity.

Bilingual applicants and people with disabilities are welcome to apply for all recruitments.

Candidates with lived experience relating to the criminal/juvenile legal system are encouraged to apply.

We welcome experienced professionals transitioning from federal service to explore rewarding career opportunities.