Cybersecurity & Privacy Technology Manager

Responsibilities

• Monitors relevant Information Sharing and Analysis Centers (ISACs), Security Operations Centers (SOCs), vendor news, and the media reports for any vulnerabilities that could impact a USM organization.
• Selects, implements, and operates the USM vulnerability and threat management tools and systems.
• Assists institutions with addressing any relevant vulnerabilities across all networks, servers, and endpoints.
• Advises institutions on video surveillance and physical security solutions.
• Drafts notices, makes presentations, and ensures that all institutions are aware of any relevant threats and vulnerabilities to their environment.
• Assists in the development, implementation, and operation of a systemwide ISAC/SOC function.
• Researches and assists institutions with implementing any technical best practices in their environments.
• Identifies technical solutions that could address security and privacy requirements.
• Provides project management expertise to USM cybersecurity and privacy projects.
• Establishes and maintains relevant cybersecurity and privacy vendor relationships.
• Assists in the selection, implementation and operation of systemwide cybersecurity and privacy tools.
• Attends meetings and assists with the activities of the USM Privacy Council and USM Security Council.
• Provides technical and forensic assistance with incident and breach response.
• Performs cybersecurity and privacy reviews of 3rd party solutions.

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a closely related field.
• An equivalent combination of related education and experience may be considered, based on a substitution rate of one year of full-time relevant experience for 30 undergraduate credits, or vice versa.
• Three (3) years of progressively responsible experience in cybersecurity, with demonstrated responsibility in at least two of the following areas:
• Vulnerability management (enterprise scanning, remediation coordination, patch/vuln lifecycle)
• Threat intelligence/monitoring (ISAC/SOC feeds, vendor advisories, triage)
• Security operations / SOC support (alerts, tooling, detection support)
• Incident response and basic forensics (containment support, evidence handling, log review)
• Third‑party risk/security reviews (vendor assessments, security/privacy requirements)
• Security tool implementation/operations (EDR, vuln scanner, SIEM, ticketing workflow)
• Knowledge of information security and privacy best practices, including operational controls, risk management, and governance processes.
• Knowledge of applicable federal, state, and industry cybersecurity and privacy standards relevant to USM.
• Knowledge of the cybersecurity and privacy technology landscape, including current and emerging hardware, software, and service solutions.
• Skill in implementing, operating, and supporting enterprise technology environments, including platforms and services from vendors such as Microsoft, Google, and Apple.
• Skill working with diverse technical environments, including mobile devices, data center infrastructure, physical security technologies, and intrusion detection/prevention systems.
• Skill in analyzing security and privacy requirements and identifying appropriate technical solutions to meet organizational needs.
• Ability to remain calm and effective in high‑pressure or conflict situations, including during security incidents.
• Ability to collaborate effectively and facilitate consensus among technical and non‑technical stakeholders.
• Ability to adapt to changing priorities and ambiguous environments while maintaining effectiveness, momentum, and professionalism.
• Strong interpersonal and communication abilities, including building relationships, preparing and delivering presentations, and communicating complex technical concepts to varied audiences.

Demonstrates expertise in cybersecurity and privacy management, including vulnerability management, incident response, and security tool implementation. Proficient in collaborating with diverse stakeholders and adapting to dynamic environments while ensuring compliance with relevant standards.