Security AND Privacy Officer; Administrative Program Manager IV

This Management Service position serves at the Appointing Authority's pleasure. A resume must accompany your completed application.

22

DJS Headquarters – Information Technology Unit
(Baltimore City)
Baltimore, MD

Join Us in Making a Difference at DJS! The Maryland Department of Juvenile Services (DJS) is dedicated to transforming young lives, creating safer communities, and fostering equitable systems. We are seeking passionate individuals for the role of Security and Privacy Officer (Administrative Program Manager IV), so come join our team and make a meaningful impact on our youth and the staff community at DJS!

The Security and Privacy Officer serves as the dedicated cybersecurity and privacy lead for DJS. Reporting directly to the Chief Information Officer (CIO), this position provides day-to-day security engagement with DJS's infrastructure, platforms, and internal operations. The role functions as DJS's empowered Information Security Officer and designated Agency Privacy Officer (APO), ensuring the department meets its cybersecurity and privacy obligations distinct from the Office of Security Management's (OSM) statewide mandate.

As the designated APO, the role performs privacy functions to support DJS's privacy risk management framework.

• Agency Security Operations and Engagement – Serving as the primary day-to-day cybersecurity point of contact for DJS divisions, including Platform and Client Services, Infrastructure, and Digital Experience, by providing security guidance, risk advisories, and operational support; conducting security assessments of systems, infrastructure, and applications; reviewing projects and procurements for security requirements; monitoring security metrics and reporting on security posture, incident trends, and remediation progress;
  
  and coordinating with OSM's Cyber Technology Directorate to support the adoption and effective use of centralized cybersecurity platforms and services.
• Privacy Officer Functions – Serving as the designated Agency Privacy Officer (APO) for the Department of Information Technology; developing and maintaining DJS-specific privacy policies, procedures, and standards aligned with statewide frameworks; conducting Privacy Impact Assessments (PIAs) for systems, applications, and data use and sharing arrangements involving personally identifiable information (PII) or Personal Information (PI); coordinating privacy incident response and breach notification obligations;
  
  and advising leadership on data minimization, retention, and disposal practices.
• Cybersecurity Agency Compliance and Risk Management – Managing DJS’s cybersecurity compliance with applicable frameworks, including the NIST Cybersecurity Framework (CSF), NIST SP 800-53, and Maryland statewide security policies; maintaining a DJS-specific risk register, tracking risk treatment plans and remediation timelines in coordination with OSM's Governance, Risk, and Compliance (GRC) functions, and reporting status to the State CISO; aligning internal compliance activities with statewide audit and assessment cycles;
  
  coordinating responses to cybersecurity and privacy findings; and maintaining clear accountability between this position’s cybersecurity and privacy compliance responsibilities and the DJS Compliance Officer’s IT, financial, and performance compliance responsibilities.
• Coordination, Governance Participation, and Program Support – Representing DJS on statewide governance boards, such as the Cyber Security Coordinating Council; collaborating with OSM directorates, including Cyber Technology, Cyber Resilience, GRC, State Privacy, and State and Local Cybersecurity, to integrate DJS-specific security and…