Cybersecurity & Privacy Technology Manager

The Cybersecurity & Privacy Technology Manager plays a key role in strengthening cybersecurity and privacy across the University System of Maryland (USM). Working with the Chief Information Security and Privacy Officer and partners across USM institutions, this position helps manage vulnerability and threat response efforts, supports the implementation of cybersecurity and privacy technologies, provides technical guidance on risk reduction strategies, and assists with incident response and third-party security reviews., Management of the USM’s Vulnerability and Threat Management Program:

• Monitors relevant Information Sharing and Analysis Centers (ISACs), Security Operations Centers (SOCs), vendor news, and the media reports for any vulnerabilities that could impact a USM organization.
• Selects, implements, and operates the USM vulnerability and threat management tools and systems.
• Assists institutions with addressing any relevant vulnerabilities across all networks, servers, and endpoints.
• Advises institutions on video surveillance and physical security solutions.
• Drafts notices, makes presentations, and ensures that all institutions are aware of any relevant threats and vulnerabilities to their environment.
• Assists in the development, implementation, and operation of a systemwide ISAC/SOC function.

Cybersecurity and Privacy Technical Program Support:

• Researches and assists institutions with implementing any technical best practices in their environments.
• Identifies technical solutions that could address security and privacy requirements.
• Provides project management expertise to USM cybersecurity and privacy projects.
• Establishes and maintains relevant cybersecurity and privacy vendor relationships.
• Assists in the selection, implementation and operation of systemwide cybersecurity and privacy tools.
• Attends meetings and assists with the activities of the USM Privacy Council and USM Security Council.

Incident Response and Security Assurance Support:

• Provides technical and forensic assistance with incident and breach response.
• Performs cybersecurity and privacy reviews of 3rd party solutions.

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a closely related field.

An equivalent combination of related education and experience may be considered, based on a substitution rate of one year of full-time relevant experience for 30 undergraduate credits, or vice versa.

Required Experience:

Three (3) years of progressively responsible experience in cybersecurity, with demonstrated responsibility in at least two of the following areas:

• Vulnerability management (enterprise scanning, remediation coordination, patch/vuln lifecycle)
• Threat intelligence/monitoring (ISAC/SOC feeds, vendor advisories, triage)
• Security operations / SOC support (alerts, tooling, detection support)
• Incident response and basic forensics (containment support, evidence handling, log review)
• Third-party risk/security reviews (vendor assessments, security/privacy requirements)
• Security tool implementation/operations (EDR, vuln scanner, SIEM, ticketing workflow)

Required Knowledge/Skills/Abilities:

• Knowledge of information security and privacy best practices, including operational controls, risk management, and governance processes.
• Knowledge of applicable federal, state, and industry cybersecurity and privacy standards relevant to USM.
• Knowledge of the cybersecurity and privacy technology landscape, including current and emerging hardware, software, and service solutions.
• Skill in implementing, operating, and supporting enterprise technology environments, including platforms and services from vendors such as Microsoft, Google, and Apple.
• Skill working with diverse technical environments, including mobile devices, data center infrastructure, physical security technologies, and intrusion detection/prevention systems.
• Skill in analyzing security and privacy requirements and identifying appropriate technical solutions to meet organizational needs.
• Ability to remain calm and effective in high-pressure or conflict situations, including during security incidents.
• Ability to collaborate effectively and facilitate consensus among technical and non-technical stakeholders.
• Ability to adapt to changing priorities and ambiguous environments while maintaining effectiveness, momentum, and professionalism.
• Strong interpersonal and communication abilities, including building relationships, preparing and delivering presentations, and communicating complex technical concepts to varied audiences.

PREFERRED QUALIFICATIONS:

Preferred Education Level/Certifications:

Advanced degree in Cybersecurity, Information Security / Information Systems, Computer Science, Information Technology, Risk Management, Public Policy, Legal Studies, or a related discipline with demonstrated cybersecurity/privacy focus.

Pulled from the full job description Tuition reimbursement AD&D insurance Health insurance Retirement plan Vision insurance Dental insurance Flexible spending account