Security And Privacy Officer

Position: SECURITY AND PRIVACY OFFICER
Introduction This Management Service position serves at the Appointing
Authority's pleasure.

A resume must accompany your completed
application. GRADE
22

LOCATION OF POSITION
DJS Headquarters – Information Technology Unit
(Baltimore City)
Baltimore, MDMain Purpose of Job Join Us in Making a Difference at DJS!

The Maryland Department of Juvenile Services (DJS) is
dedicated to transforming young lives, creating safer communities, and
fostering equitable systems. We are seeking passionate individuals for the role
of Security and Privacy Officer (Administrative Program Manager IV),
so come join our team and make a meaningful impact on our youth and the staff
community at DJS!
The Security and Privacy Officer serves as the dedicated cybersecurity and privacy
lead for DJS. Reporting directly to the Chief Information Officer (CIO), this
position provides day-to-day security engagement with DJS’s infrastructure,
platforms, and internal operations. The role functions as DJS’s empowered
Information Security Officer and designated Agency Privacy Officer (APO),
ensuring the department meets its cybersecurity and privacy obligations
distinct from the Office of Security Management’s (OSM) statewide mandate. As
the designated APO, the role performs privacy functions to support DJS’s
privacy risk management framework. In this role, you will have the opportunity to contribute in various
ways, including:

Agency Security Operations and Engagement – Serving as the primary day-to-day
cybersecurity point of contact for DJS divisions, including Platform and Client
Services, Infrastructure, and Digital Experience, by providing security
guidance, risk advisories, and operational support; conducting security
assessments of systems, infrastructure, and applications; reviewing projects
and procurements for security requirements; monitoring security metrics and
reporting on security posture, incident trends, and remediation progress; and
coordinating with OSM’s Cyber Technology Directorate to support the adoption
and effective use of centralized cybersecurity platforms and services

Privacy Officer Functions – Serving as the designated Agency Privacy
Officer (APO) for the Department of Information Technology; developing and
maintaining DJS-specific privacy policies, procedures, and standards aligned
with statewide frameworks; conducting Privacy Impact Assessments (PIAs) for
systems, applications, and data use and sharing arrangements involving
personally identifiable information (PII) or Personal Information (PI);
coordinating privacy incident response and breach notification obligations; and
advising leadership on data minimization, retention, and disposal practices

Cybersecurity Agency Compliance and Risk
Management –
Managing DJS’s cybersecurity compliance with applicable frameworks, including
the NIST Cybersecurity Framework (CSF), NIST SP 800-53, and Maryland statewide
security policies; maintaining a DJS-specific risk register, tracking risk
treatment plans and remediation timelines in coordination with OSM’s
Governance, Risk, and Compliance (GRC) functions, and reporting status to the State
CISO; aligning internal compliance activities with statewide audit and
assessment cycles; coordinating responses to cybersecurity and privacy
findings; and maintaining clear accountability between this position’s
cybersecurity and privacy compliance responsibilities and the DJS Compliance
Officer’s IT, financial, and performance compliance responsibilities

Coordination, Governance Participation, and
Program Support –
Representing DJS on statewide governance boards, such as the Cyber Security
Coordinating Council; collaborating with OSM directorates, including Cyber
Technology, Cyber Resilience, GRC, State Privacy, and State and Local
Cyber…