Skip to Main Content

PROGRAM MANAGER III

Information Security Officer

Recruitment #23-005478-0022

Go Back View Benefits

Introduction

The Maryland Lottery and Gaming Control Agency (MLGCA) serves as one of the largest revenue sources for the State of Maryland, supporting important state programs and services including education, public health and safety, human resources and the environment. In addition to generating revenue from the sale of lottery products, the MLGCA is also responsible for the oversight of the state’s casino gaming program, providing direction and guidance to its casino partners on financial, security, regulatory and licensing procedures for the facilities. The Agency also regulates Sports Wagering, Daily Fantasy Sports and Electronic Bingo, as well as Instant Ticket Lottery Machines, which are located at almost 90 Veteran’s posts. Gaming in Maryland is a dynamic and growing business that operates around the clock, 365 days of the year. 

GRADE

21

LOCATION OF POSITION

Montgomery Park Business Center 
1800 Washington Boulevard, Ste. 330 
Baltimore, Maryland 21230

Main Purpose of Job

This position functions as the Information Security Officer for the Maryland Lottery and Gaming Control Agency (MLGCA). The main purpose of this position is to manage and direct the information security program and the risk management framework for the agency. This position is responsible for the development, implementation, and coordination of all activities related to information security, including establishing and reviewing policies and procedures, development of security standards and controls, security compliance with state, federal, and regulatory requirements, and implementation and oversight of security controls within agency applications and infrastructure devices.

 Employees in this classification receive managerial or executive supervision from the MLGCA Chief Information Officer or other Executive Staff. Employees may be required to work on evenings, weekends and holidays and may be subject to callin.

POSITION DUTIES

This position functions as the Information Security Officer for the Maryland Lottery and Gaming Control Agency (MLGCA). The main purpose of this position is to manage and direct the information security program and the risk management framework for the agency. This position is responsible for the development, implementation, and coordination of all activities related to information security, including establishing and reviewing policies and procedures, development of security standards and controls, security compliance with state, federal, and regulatory requirements, and implementation and oversight of security controls within agency applications and infrastructure devices. 

Position duties include: 

• Coordinating the development and implementation of IT Security Policies.
• Developing standards, guidelines, and processes that comply with state, federal, and other regulatory requirements.
• Evaluating the agency IT security, and establishing goals, standards, and controls to meet objectives.
• Identifying, tracking, and mitigating IT risks and vulnerabilities and implement IT security improvements.
• Overseeing the security awareness training of agency staff.
• Operating and maintaining IT security systems and applications.
• Participating as an agency point of contact with the MD-ISAC.
• Responding to audit request, reports, and findings related to IT security and compliance.
• Reviewing technical designs of applications and systems to ensure security compliance with state, federal, and regulatory security controls is maintained throughout the SDLC.
• Reviewing SOC II and other security assessment reports and working with agency IT and business partners to track and mitigate security findings.

MINIMUM QUALIFICATIONS

Education: 

Bachelor's degree from an accredited college or university in Cyber Security, Computer Information Systems, Computer Science, or Management Information Systems or other information technology related field to include course work in cyber security technologies.
 
Experience: 

Three years of experience managing an agency level cyber security program, including the development of policies, management and mitigation of identified risks, and maintaining regulatory compliance. 
Five years of experience in Cyber Security disciplines may be substituted for two years of education. 

SELECTIVE QUALIFICATIONS


DESIRED OR PREFERRED QUALIFICATIONS

Preferred Qualifications: 

- Master's Degree or equivalent. 
- CISSP Certification 
- Five years of experience in risk and regulatory compliance and information security policy development. 

SELECTION PROCESS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date. We will not consider information submitted after this date. Successful candidates will be ranked as Best Qualified, Better Qualified, or Qualified and placed on the eligible (employment) list for at least one year.

EXAMINATION PROCESS

The assessment may consist of a rating of your education, training, and experience related to the requirements of the position. It is important that you provide complete and accurate information on your application. Please report all experience and education that is related to this position.

BENEFITS

FURTHER INSTRUCTIONS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications of this recruitment.  

Resumes will not be accepted in lieu of completing an application. All information concerning your qualifications must be submitted by the closing date.  

We will not consider information submitted after this date. Applicants will be rated based on their description of job duties and responsibilities. Applicants should be thorough in completing this requirement.  

The online application process is strongly advised.  

If the online process is not available to you, you may complete and submit a paper application or direct any questions to: 

Marcus Staten, HR Officer 
1800 Washington Blvd., Ste. 330 
Baltimore, MD 21230  
marcus.staten2@maryland.gov 

TTY Users: call via Maryland Relay As an equal opportunity employer, Maryland is committed to recruiting, retaining and promoting employees who are reflective of the State's diversity. People with disabilities and bilingual candidates are encouraged to apply. 

We Thank our Veterans for their service to our country.



Powered by JobAps