GRC Project Manager; DoIT Technology Platform Manager II

Introduction

The State of Maryland manages various security, privacy, and compliance requirements across agencies and platforms. The GRC directorate requires a dedicated project manager to oversee the strategic development and management of Maryland’s cybersecurity and privacy policy suite, State’s cybersecurity and privacy risk management program, and the AI Governance program.

*** This is a contractual position with limited benefits.***

Location:

Department of Information Technology, 100 Community Place, Crownsville, MD 21038.

The GRC Project Manager (PM) will be responsible for managing and overseeing the implementation of comprehensive programs within the GRC directorate (cybersecurity and privacy policy suite, risk management, AI governance, IT Policy). The PM will align to OSM’s Enterprise Agile project management methodologies and perform day-to-day management of the programs and projects reporting under the GRC Directorate, ensuring the programs and projects progress successfully, identifying and managing issues and risks, and recommending and implementing approved mitigation strategies associated with the programs under the purview of the GRC Directorate.

Key responsibilities include:

• Reporting and Governance:
  Provide weekly scope, budget, and schedule status updates on accomplishments, milestones, tasks, roadblocks, issues, and risks related to the Cybersecurity and Privacy Program.
• Program Leadership:
  Lead cross‑functional teams and technical resources to prioritize the delivery of high‑quality programs under the GRC directorate that meet business needs and mandated requirements.
• Planning and Artifacts:
  Oversee the development and approval of program plans, focusing on the security and privacy roadmap areas. Develop and update project charters, business objectives, scope statements, success criteria, and other project artifacts as required for GRC initiatives related to Cybersecurity and Privacy Policy Suite, Risk Management, AI Governance, and IT Policy programs.
• Alignment and Scope:
  Ensure alignment between State CISO priority initiatives and the GRC directorate’s strategic direction. Manage program scope to align work efforts to GRC directorate’s goals and objectives.
• Development and Management:
  Manage work activities to ensure conformity to the program scope, timelines, and budgets, utilizing Azure Dev Ops (ADO) or another State CISO assigned program/project management tool. Develop and manage budgets and resourcing plans for the programs, and track performance against these plans.
• Metrics and Quality:
  Develop performance and quality measures and metrics for program management activities, track, periodically analyze and report on measures, including key risk indicators (KRIs) and key performance indicators (KPIs).
• Program Implementation:
  Develop transition activities and roll‑out schedules for new security and privacy controls or compliance frameworks. Ensure work and deliverables, as defined in issued work orders and project plans, are completed and meet legal, regulatory, and policy mandates.
• Stakeholder Management:
  Motivate the program teams and forge consensus around program goals and objectives. Promote a customer service relationship among peers. Develop and implement communication strategies to improve transparency and promote awareness of program areas and issues to stakeholders and agency partners.
• Change Control:
  Integrate change management and change control practices into the program as required, especially concerning changes to GRC processes or security controls.
• Documentation:
  Maintain an organized repository for project documentation, including any presentations, plans, reports and relevant correspondence.

• Education:
  
  A Bachelor’s degree from an accredited college or university in Information Technology, Cybersecurity, Public Policy, Business Administration, or a related field.
• Experience:
  
  Three years of experience performing project management work in an IT Security, Risk Management, or Compliance GRC environment.

• Proficiency with Agile methodologies and project management tools (e.g., Azure Dev Ops, Jira, or similar)…