SECURITY AND PRIVACY OFFICER

About the job

Introduction

\r\n\r\n\r\nThis Management Service position serves at the Appointing\r\nAuthority's pleasure.\r\n\r\nA resume must accompany your completed\r\napplication.�\r\n

GRADE

22\r\n

LOCATION OF POSITION

DJS Headquarters – Information Technology Unit\r\n(Baltimore City)\r\nBaltimore, MD\r\n

Main Purpose of Job

Join Us in Making a Difference at DJS!\r\n\r\n\r\nThe Maryland Department of Juvenile Services (DJS) is\r\ndedicated to transforming young lives, creating safer communities, and\r\nfostering equitable systems. We are seeking passionate individuals for the role\r\nof Security and Privacy Officer (Administrative Program Manager IV),\r\nso come join our team and make a meaningful impact on our youth and the staff\r\ncommunity at DJS!\r\n\r\n\r\nThe Security and Privacy Officer serves as the dedicated cybersecurity and privacy\r\nlead for DJS. Reporting directly to the Chief Information Officer (CIO), this\r\nposition provides day-to-day security engagement with DJS’s infrastructure,\r\nplatforms, and internal operations. The role functions as DJS’s empowered\r\nInformation Security Officer and designated Agency Privacy Officer (APO),\r\nensuring the department meets its cybersecurity and privacy obligations\r\ndistinct from the Office of Security Management’s (OSM) statewide mandate. As\r\nthe designated APO, the role performs privacy functions to support DJS’s\r\nprivacy risk management framework.�\r\n\r\n\r\nIn this role, you will have the opportunity to contribute in various\r\nways, including:\r\n\r\n\r\n\r\n\r\n Agency Security Operations and Engagement – Serving as the primary day-to-day\r\n cybersecurity point of contact for DJS divisions, including Platform and Client\r\n Services, Infrastructure, and Digital Experience, by providing security\r\n guidance, risk advisories, and operational support; conducting security\r\n assessments of systems, infrastructure, and applications; reviewing projects\r\n and procurements for security requirements; monitoring security metrics and\r\n reporting on security posture, incident trends, and remediation progress; and\r\n coordinating with OSM’s Cyber Technology Directorate to support the adoption\r\n and effective use of centralized cybersecurity platforms and services\r\n\r\n\r\n\r\n\r\n Privacy Officer Functions – Serving as the designated Agency Privacy\r\n Officer (APO) for the Department of Information Technology; developing and\r\n maintaining DJS-specific privacy policies, procedures, and standards aligned\r\n with statewide frameworks; conducting Privacy Impact Assessments (PIAs) for\r\n systems, applications, and data use and sharing arrangements involving\r\n personally identifiable information (PII) or Personal Information (PI);\r\n coordinating privacy incident response and breach notification obligations; and\r\n advising leadership on data minimization, retention, and disposal practices\r\n\r\n\r\n\r\n\r\n Cybersecurity Agency Compliance and Risk\r\n Management –\r\n Managing DJS’s cybersecurity compliance with applicable frameworks, including\r\n the NIST Cybersecurity Framework (CSF), NIST SP 800-53, and Maryland statewide\r\n security policies; maintaining a DJS-specific risk register, tracking risk\r\n treatment plans and remediation timelines in coordination with OSM’s\r\n Governance, Risk, and Compliance (GRC) functions, and reporting status to the State\r\n CISO; aligning internal compliance activities with statewide audit and\r\n assessment cycles; coordinating responses to cybersecurity and privacy\r\n findings; and maintaining clear accountability between this position’s\r\n cybersecurity and privacy compliance responsibilities and the DJS Compliance\r\n Officer’s IT, financial, and performance compliance responsibilities\r\n\r\n\r\n\r\n\r\n Coordination, Governance Participation, and\r\n Program Support –\r\n Representing DJS on statewide governance boards, such as the Cyber Security\r\n Coordinating Council; collaborating with OSM directorates, including Cyber\r\n Technology, Cyber Resilience, GRC, State Privacy, and State and Local\r\n Cybersecurity, to integrate DJS-specific security and privacy activities into\r\n the statewide program; and supporting the CIO with analysis, briefing\r\n materials, and situational awareness on security and privacy matters for\r\n executive leadership reporting�\r\n\r\n\r\n\r\n\r\n Other Duties as Assigned – Performing other duties as assigned by the\r\n Chief Information Officer\r\n \r\n\r\n\r\n\r\n

MINIMUM QUALIFICATIONS

Experience: Five (5) years of professional\r\nexperience performing information security, cybersecurity risk assessment,\r\nsecurity compliance monitoring, privacy risk management, or information\r\ntechnology risk and compliance activities.\r\n\r\n\r\nNote: Candidates may substitute a Bachelor's degree from an accredited\r\ncollege or university in information technology, cybersecurity, computer\r\nscience, information systems, or a closely related field for three (3) years of\r\nthe required experience.\r\n

DESIRED OR PREFERRED QUALIFICATIONS

The\r\npreferred candidate for this position may possess any of the following:�\r\n\r\n\r\n Experience applying cybersecurity frameworks and standards to security\r\n assessments, risk mitigation, and compliance activities, preferably in a\r\n public-sector or government environment�\r\n Experience supporting or implementing privacy program activities,\r\n including privacy assessments, privacy incident response, data protection\r\n practices, or the development and maintenance of privacy policies and\r\n procedures�\r\n Possess any relevant professional certifications or specialized training\r\n in cybersecurity, information security, or privacy, or risk management\r\n\r\n\r\n

SELECTION PROCESS

Please make\r\nsure that you provide sufficient information on your completed application to\r\nshow that you meet the qualifications for this recruitment. All information\r\nconcerning your qualifications must be submitted by the closing date. We will\r\nnot consider information submitted after this date. Candidates will remain on\r\nthe certified eligible list for one (1) year. The resulting certified eligible\r\nlist from this recruitment may be used to fill similar positions of the same\r\nclassification in this or other State agencies.\r\n

EXAMINATION PROCESS

The assessment will involve a rating of your\r\napplication based on your education, training, and/or experience as it relates\r\nto the position's requirements. Therefore, it is essential that you\r\nprovide complete and accurate information on your application. Incomplete\r\napplications will not be accepted. Please report all relevant experience and\r\neducation. For\r\neducation obtained outside the U.S., you will be required\r\nto provide proof of equivalent American education, as determined by a Foreign\r\nCredential Evaluation Service, at the time of hire.\r\n\r\n\r\nPlease complete the supplemental\r\nquestionnaire, if applicable. They will be used when rating applications.\r\nPlease note that your answers on the supplemental questionnaire must correspond\r\nto the information provided on your completed application to receive credit.\r\nMissing or incomplete supplemental questionnaires may impact the overall rating\r\nof your completed application.\r\n\r\n\r\n\r\nIf you are a Veteran applying for this\r\nposition, please submit your DD 214 Long Form with your completed application\r\nto receive proper credit.\r\n

BENEFITS

STATE OF MARYLAND BENEFITS\r\n

FURTHER INSTRUCTIONS

The online application process is STRONGLY\r\nrecommended. However, if you are unable to apply online, you may submit a\r\ncompleted paper application and supplemental questionnaire responses via email\r\nor fax to the addresses provided below. If using fax or regular mail, ensure\r\neach page includes your First and Last Name, the Recruitment Number (located at\r\nthe top of the posting), and the last four digits of your SS#. Paper\r\napplication materials must be received by 5:00 PM\r\non the closing date for the recruitment. Applications received after this time,\r\nor those with incorrect forms, will not be accepted. Postmarks will not be\r\nconsidered.\r\n\r\n\r\n\r\nMaryland Department of Juvenile Services��\r\nOHR-Recruitment & Examination Unit��\r\n217 E. Redwood Street��\r\nBaltimore, MD 21202��\r\nAttn: Recruitment# 26-005475-0005�\r\nFax number 410-333-4188�\r\nTTY Users: call via Maryland Relay\r\n\r\n\r\nIf you are having difficulty with your\r\nuser account or have general questions about the online application system,\r\nplease contact the Maryland Department of Budget and Management, Recruitment\r\nand Examination Division at 410-767-4850 or Application.Help@maryland.gov.�\r\n\r\n\r\nShould additional information regarding\r\nthis recruitment be required, please contact the Maryland Department of\r\nJuvenile Services, Recruitment and Examination Unit at djs.careers@maryland.gov. Include the\r\nRecruitment Title/Number that is located at the top of the bulletin.�\r\n\r\n\r\nAs an equal-opportunity employer, Maryland\r\nis committed to recruiting, retaining, and promoting employees who are\r\nreflective of the State’s diversity.�\r\n\r\n\r\nDJS values the experience gained by\r\nVeterans while serving our country. Veterans are welcome to apply for all\r\ncurrent recruitments.�\r\n\r\n\r\nBilingual applicants and people with\r\ndisabilities are welcome to apply for all recruitments.�\r\n\r\n\r\nCandidates with lived experience relating\r\nto the criminal/juvenile legal system are encouraged to apply.�\r\n\r\n\r\nWe welcome experienced professionals\r\ntransitioning from federal service to explore rewarding career opportunities.\r\n\r\n\r\n\r\n\r\n