Director, Audit Response & Compliance Operations DoIT Technology Platform Director

Introduction

The Department of Information Technology (DoIT) leads the State in the creation and implementation of information technology solutions that improve IT infrastructure and government services and keep Maryland current within IT industry trends. Within DoIT, the Compliance Unit safeguards the integrity of the State’s IT operations by ensuring audit, regulatory, and policy obligations are met with rigor, transparency, and enterprise-wide consistency.

This is an exciting opportunity to shape an enterprise capability from the ground up.
This is a contractual position with limited benefits.

STD 0024

100 Community Pl., Crownsville, MD 21038

This position is the operational execution of Maryland DoIT’s enterprise audit response function, exercising day-to-day command authority over the State Audit Response Operating Model (SAROM). It transforms audit response from a reactive activity into a disciplined enterprise workflow, setting service levels, enforcing standards, and driving accountability across DoIT and partner agencies. The role also shapes the State’s compliance posture by identifying gaps, recommending improvements, and codifying repeatable practices.

• Direct enterprise intake operations across email and Service Now, ensuring every audit request is formally captured, classified, and assigned to a defined owner.
• Establish and enforce service‑level expectations, escalation thresholds, and throughput standards to prevent degradation of response and reputational exposure.
• Govern workflow and routing automation so requests are correctly assigned on first touch and escalated when risks emerge.
• Serve as steward of the authoritative audit repository, standard templates, operating procedures, and record‑retention discipline, preserving evidentiary integrity.
• Lead cross‑agency response coordination to deliver unified submissions, consistent messaging, and full visibility into open audit obligations and corrective actions.
• Produce executive‑level reporting on audit posture, throughput, aging, and risk trends to inform Senior Leadership and external stakeholders.
• Drive continuous improvement of SAROM by analyzing performance data, capturing lessons learned, and evolving standards to keep pace with regulatory and operational demands.
• Partner with DoIT leadership, agency liaisons, and external auditors to build trusted relationships, clarify expectations, and resolve disputed findings before escalation.

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Business Administration, Accounting/Finance, or a related field.
• Three (3) years of experience performing audits, compliance reviews, risk management, and/or quality assurance in an information technology environment.
• Candidates may substitute two additional years of qualifying experience for the degree requirement.

• One year of audit, compliance, risk management, or quality assurance experience in a public‑sector IT environment (county, state, or federal).
• Hands‑on experience in Service Now, including workflow configuration and reporting.
• One year experience using workflow and routing platforms and complex spreadsheets to track audit activity at scale.
• Demonstrated experience partnering with Senior Leadership on enterprise governance, risk, or compliance initiatives.

Contractual employees who work for an agency and have a current employment contract of 30 or more hours a week (or on average 130 hours per month) are eligible for subsidized health benefits coverage for themselves and their dependents. Paid leave accrues at a rate of one hour for every 30 hours worked.

As an equal‑opportunity employer, Maryland is committed to recruitment, retention, and promotion of employees who reflect the State’s diversity. People with disabilities and bilingual candidates are encouraged to apply.