View Jobs in All Categories:

Job Description

Position Number:

Title:

Functional Title:

Category Status:

Applicant Search Category:

Unit:

Campus/College Information:

Background Checks

Offers of employment are contingent on completion of a background check. Information reported by the background check will not automatically disqualify you from employment.

Vaccine Protocol

The University of Maryland has made the safety of our students, faculty and staff, and our surrounding communities a top priority. As part of that commitment, the University System of Maryland (USM) recently announced that students, faculty, and staff on USM campuses this fall, including UMD, are required to be vaccinated against COVID. As a prospective and/or a new employee at UMD, you will be required to comply with the University’s vaccination protocol. Proof of full vaccination will be required before the start of employment in order to work at any University of Maryland location. Prospective or new employees may seek a medical or religious exemption to the vaccination requirement at return.umd.edu and must have an approved exemption prior to the start of their employment. Failure to provide proof of vaccination or to obtain approval for a medical or religious exemption will result in the offer of employment being rescinded.

Position Summary/Purpose of Position:

• Continues to evolve the USM IT Security Standard toward NIST compatibility.
• Develops baseline information security practices and frameworks.
• Evaluates new/evolving information security requirements (e.g., CMMC, GLBA, etc.) and the USM’s readiness.
• Consults with institutions on information security and privacy gap identification in all segments including research.
• Develops a maturity model template and evaluation procedures for institutions to self-assess risk posture and opportunities for individual and collaborative improvement, bringing to bear USMO resources as available.
• Partners with other established entities (e.g., MEEC, MDREN, Judiciary, DoIT, Office of Attorney General, etc.) to bring outsourced contracting assistance to bear and assist in managing those contracts. Coordinate with appropriate audit entities (e.g., OLA, USM IA, CLA, etc.) on matters relating to past, current and future audits.

• Coordinates with appropriate stakeholders on the implementation of the Maryland Public Higher Education Privacy Law (e.g., general counsels, privacy officers, …, etc.).
• Coordinates with appropriate audit entities (e.g., OLA, USM IA, CLA, etc.) on matters relating to past, current and future audits.
• Coordinates with USM institutions, the USMO, the BOR, and external entities on any security incidents or breaches
• Provides Operational advice to the USM, Board of Regents, institutional general counsels, Office of Attorney General and all USM stakeholders on information security, privacy, and information technology topics. This includes contract and other formal agreement review for sufficiency relative to IT security and data privacy.

• Leads the USM IT Security Council and Information Privacy Implementation Teams and developing touchpoints with other established constituents (e.g., ITCC, ERP PMs, other institutional leadership councils, etc.).
• Monitors the current and evolving information security and privacy industry and legal trends.
• Provides strategic and operational advice and counsel on matters relative to information security and privacy.
• Helps institutions develop information security and privacy roadmaps to administer programs and new technologies.
• Assists in the management of USM and institutional risk.
• Assists the USM and institutions as needed with enterprise crisis management programs.
• Coordinates across the USM and State of Maryland on any cyber insurance needs.

• Evaluates and develops draft USM testimony relative to information and technology related legislation.
• Coordinates with institutions and USMO Legislative Affairs team on submittal/presentation of testimony as appropriate.
• Communicates with bill sponsors and executive agencies as applicable.

Minimum Qualifications:

• Knowledge of best practice information security and privacy operations.
• Knowledge of federal and other standards, pertinent to USM, relative to ITSEC and DP.
• Knowledge of FERPA, PCI, HIPAA, GLBA and other standards, laws and regulations impacting higher education.
• Understanding of technology landscape and state of play in ITSEC and DP hardware, software, and services.
• Ability to help institutions develop controls appropriate for their campus and in alignment with applicable standards/guidelines.
• Ability to lead and manage technical teams.
• Remains calm and is able to manage conflict.
• Elicits collaborative input and can facilitate consensus.
• Strong consultative, customer-oriented and collaborative approach to issue identification and resolution.
• Flexible, adaptable, and able to sustain momentum; effective and enthusiastic demeanor while conditions and organizational structures may be ambiguous and fluid.
• Strong interpersonal skills and experience working with multiple internal and external constituencies; able to gain community respect and possesses good relationship-building skills.
• Exceptional communications capabilities, including leveraging other people’s knowledge and ideas, giving presentations, and speaking publicly.
• Skill in monitoring the performance of outside contractors and scope of work.
• Ability to work collaboratively with legal professionals inside and outside of the USM.
• Ability to work with governmental bodies on regulatory and legislative matters.
• Ability to provide interpretation of regulations and laws as it relates to operational implementation. 
• Ability to manage legal teams to achieve USM and institutional goals.

Preferences:

• Familiarity with the legislative process and providing written and oral testimony to legislators.
• Strong working knowledge of higher education business processes, financial issues, and education industry.
• Knowledge of national and international education policy, regulations, and law.
• Experience with institutional research programs on issues of research security compliance, research information governance and negotiation of research agreements.

Additional Information:

Job Risks

Posting Date:

Open Until Filled

Best Consideration Date

Diversity Statement: