Cybersecurity Director - Baltimore, MD

Cybersecurity Director - Baltimore, MD

Join to apply for the Cybersecurity Director - Baltimore, MD role at Vet Jobs

2 days ago – Be among the first 25 applicants

All positions are onsite unless otherwise stated.

Responsible for strategic direction of cybersecurity programs and monitoring of programs to ensure that risks associated with corporate systems and processes are anticipated, recognized, and appropriately managed and mitigated. This role requires the ability to work cross‑functionally with IT teams and key stakeholders, delivering clear recommendations to improve results. Responsible for planning, developing, mentoring, leading and monitoring work of the department and its management.

• Partner with internal and external groups that periodically assess control effectiveness to ensure that these assessments are conducted in a smooth and efficient manner and that any issues and exceptions identified in the operation of controls are promptly and enduringly corrected.
• Develop and maintain strategy and approach for improving efficiency and value add of the team. Ensure organizational procedures are aligned to maintain compliance with industry standards, contractual and regulatory requirements. Act as a trusted advisor to business and technology leadership on the design and effective operation of controls.
• Work with senior and executive leadership to determine long‑range goals and develop action plans for implementation. Determine and pursue courses of action essential in obtaining desired organizational results. Take calculated risks.
• Represent the organization as the primary contact. Interact with management and senior value‑chain partners on matters requiring coordination across organizational lines. Influence others both internally and potentially externally. Hold internal and external stakeholders accountable for cybersecurity effectiveness and make recommendations for improvement as appropriate.
• Direct managers and other subordinate staff members in the day‑to‑day operations of cybersecurity.

• This position manages people.

• Ability to multitask and manage multiple IT vendor relationships.
• Ability to lead and work as part of a team.
• Ability to execute technology and tool automation processes.
• Deep knowledge of risk treatment and mitigation strategies.
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity.
• Thorough understanding of cyber threats and vulnerabilities.
• Must be able to meet established deadlines and handle multiple customer service demands from internal and external customers, within set expectations for service excellence. Communicate effectively and provide positive customer service to every internal and external customer, including those who may be demanding or challenging.

Education Level

• Bachelor's Degree in Computer Science, Information Technology, or related field OR, in lieu of a Bachelor's degree, an additional 4 years of relevant work experience is required in addition to the required work experience.

Experience

• 8 years related professional experience. 3 years management experience.

Preferred Qualifications

• Master's degree.
• Knowledge and work experience managing resources using several of the following frameworks/regulations: NIST 800‑53 Rev. 4/5, HIPAA Security and Privacy Final Rule (45 C.F.R. Part 164), NIST 800‑171, HITRUST, FedRAMP, SOC Reports, NIST CSF, NIST RMF, CIS benchmarks, CIS Top 20, CCM, COBIT, CMMC, CMMI, ISO 27001.
• Various privacy frameworks: GDPR, CCPA, others.
• Knowledge of System Security Plans based on NIST 800‑171, 800‑53, and FedRAMP.
• Experience managing staff responsible for cybersecurity and privacy risk assessments, risk exception and acceptance requests.
• Familiarity with SIG, SOC2 Type 2, and other security attestation documents and software systems to support vendor assessments and third‑party risk management.
• Skilled at working with a variety of stakeholders (internal and external) to influence change, understand and assess cybersecurity strengths, weaknesses, and gaps in adherence to controls, and deliver solutions…