SECURITY AND PRIVACY OFFICER (Administrative Program Manager IV)

DJS Departmental Support; Baltimore (MD); Sur place; USD 110 000 - 160 000; Plein temps

Résumé du poste

Maryland Department of Juvenile Services seeks a Security and Privacy Officer to lead cybersecurity and privacy efforts, reporting to the Chief Information Officer. You will engage with DJS infrastructure daily, oversee privacy programs, and drive compliance with NIST CSF and NIST SP 800-53 while maintaining risk registers and participating in statewide governance boards.

Responsibilities include privacy impact assessments, incident response coordination, and acting as the Agency Privacy Officer

Qualifications

• Five years of professional experience in information security or related fields.
• Experience applying NIST CSF and NIST SP 800-53 to assessments and compliance.
• Experience supporting privacy program activities including PIAs and incident response

Responsabilités

• Lead cybersecurity and privacy functions for DJS infrastructure and platforms.
• Conduct security assessments and manage privacy impact assessments.
• Maintain risk registers and participate in statewide governance boards.
• Serve as Agency Privacy Officer, ensure regulatory compliance

Connaissances

Information security

Cybersecurity risk assessment

Security compliance monitoring

Privacy risk management

IT risk and compliance

Outils

NIST CSF

NIST SP 800-53

Description du poste

The Security and Privacy Officer serves as the dedicated cybersecurity and privacy lead for the Maryland Department of Juvenile Services, reporting to the Chief Information Officer. The role provides day-to-day security engagement with DJS infrastructure and platforms, functions as the Agency Privacy Officer, and manages cybersecurity compliance with frameworks including NIST standards. Responsibilities include conducting security assessments, managing privacy impact assessments, maintaining risk registers, and participating in statewide governance boards.

Key qualifications:

• Five years of professional experience in information security, cybersecurity risk assessment, security compliance monitoring, privacy risk management, or IT risk and compliance activities
• Experience applying cybersecurity frameworks and standards (NIST CSF, NIST SP 800-53) to security assessments and compliance activities
• Experience supporting or implementing privacy program activities including privacy assessments, incident response, and policy development
• Knowledge of Privacy Impact Assessments (PIAs) and privacy incident response procedures
• Preferred: professional certifications in cybersecurity, information security, privacy, or risk management