Director of Local Cybersecurity

State of Maryland • Anne Arundel, MD

3d

About The Position

The Department of Information Technology (DoIT) provides support to state agencies, the Executive Office of the Governor, the Governor’s coordinating offices, and a variety of independent agencies within the Executive Branch. Striving to provide the highest level of customer service to its internal and external customers, DoIT supports Maryland’s agencies and commissions through its leadership and strategic direction for Information Technology and Telecommunications, establishing a long range, target technology architecture, encouraging cross agency collaboration and advocating best practices for operations and project management. This is a management service position that serves at the pleasure of the appointing authority GRADE STD 0026 LOCATION OF POSITION 100 Community Place, Crownsville, MD 21038 Main Purpose of Job The Director of Local Cybersecurity leads the planning, execution, and operational management of Maryland’s Local Cybersecurity Program under the Office of Security Management. Reporting to the Senior Director for State and Local Cybersecurity, this position directs initiatives that strengthen the cyber resilience of counties, municipalities, 12 school systems, health departments, and other local entities. The Director ensures alignment with statewide cybersecurity strategy, oversees local risk assessments and remediation planning, and manages coordination with the Maryland Department of Emergency Management (MDEM) and other partners to enhance preparedness, response, and recovery capabilities.

Requirements

• Education: A bachelor’s degree or a master’s degree in cybersecurity or a cybersecurity-related discipline is required for this position to support succession planning due to a legal requirement for the State CISO position.
• Identifying, implementing, or assessing security controls
• Managing highly technical security, security operations centers, and incident response teams in a complex cloud environment supporting multiple sites.
• Working with common information security management frameworks, such as NIST RMF, NIST CSF
• Have extensive knowledge of information technology and cybersecurity field concepts, best practices, and procedures with an understanding of existing enterprise capabilities and limitations to ensure the secure integration and operation of security networks and systems
• Have knowledge of current security regulations
• Working in the context of service-provider telecommunications networks
• 5 years of experience in a service organization

Nice To Haves

• A high-level cybersecurity certification, such as a CISSP, CISM, CCISO
• A project management certification, such as a Project+, PMP, or CSM.
• Experience leading response and recovery activities for large-scale cybersecurity incidents.
• A strong understanding of, and experience working with Incident Command System in the context of supporting emergency management response activities, such as large-scale cyber-disruptions

Responsibilities

• Leads the planning, execution, and operational management of Maryland’s Local Cybersecurity Program
• Directs initiatives that strengthen the cyber resilience of counties, municipalities, 12 school systems, health departments, and other local entities
• Ensures alignment with statewide cybersecurity strategy
• Oversees local risk assessments and remediation planning
• Manages coordination with the Maryland Department of Emergency Management (MDEM) and other partners to enhance preparedness, response, and recovery capabilities.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Number of Employees: 5,001-10,000 employees