Apply on Employer Site

State of Maryland · 16 hours ago

SRPS CYBERSECURITY DEFENSE COMPLIANCE SPECIALIST Series SRPS CYBERSECURITY DEFENSE COMPLIANCE SPECIALIST I/II

Maryland, United States

Full-time

Hybrid

Entry, Mid Level

2+ years exp

The Maryland State Retirement and Pension System (MSRPS) administers benefits for over 397,000 members and is seeking a Cybersecurity Defense Compliance Specialist. The role involves managing cybersecurity compliance initiatives, coordinating audits, and maintaining cybersecurity policies to ensure high compliance maturity levels within the program.

Government Administration

Responsibilities

Administer the GRC platform; populate the controls library with fresh content/artifacts, monitor/integrate data imports from connectors, onboard new audits (internal & external), build custom profiles, run cybersecurity risk reports/heat maps, update the risk register, monitor Jira GRC task flows (40%)

Administer & manage the security awareness training platform; setup new training & phishing campaigns, monitor & notify users in policy non-compliance, run risk/training completion reports. (20%)

Onboard new cybersecurity audit campaigns (internal & external); ingest audit requirements into the GRC platform, assemble/update artifact repositories, build workspaces for auditors to review RDL items (20%)

Maintain the cybersecurity policy and document repository, perform policy lifecycle tasks (update/create/deprecate material, and manage authorization processes), design data maps & process workflow diagrams, & document cybersecurity procedures. (10%)

Research & stays abreast of changes in cybersecurity standards (such as NIST, CSF and State of MD/DoIT), and assists in efforts to maintain standards compliance, manages the Capability Maturity Model Integration (CMMI) cybersecurity program to maintain a minimum Level III maturity. (10%)

Qualification

GovernanceRisk & ComplianceCybersecurity standards knowledgeSecurity awareness trainingCybersecurity audit managementData security complianceCompiling reportsTeamworkCommunication

Required

Graduation from an accredited high school or possession of a high school equivalency certificate

Two years of experience in the data security compliance discipline, working knowledge of Governance, Risk and Compliance (GRC) platforms, security audit management and procedures, compiling reports and analytics from completed security audits and risk assessments (internal and external sources), and administering security awareness training services/products

Three years of experience in the data security compliance discipline, working knowledge of Governance, Risk and Compliance (GRC) platforms, security audit management and procedures, compiling reports and analytics from completed security audits and risk assessments (internal and external sources), and administering security awareness training services/products

Six months working experience in cybersecurity management, cybersecurity & information assurance, or data/network security engineering technology

Must have one industry certification highly desirable (e.g. CompTIA's: Security+, and/or Certified Information Systems Auditor (CISA))

Preferred

A bachelor's degree in Cybersecurity Management and Policy, Cybersecurity Technology, Cybersecurity and Information Assurance, Network Engineering and Security, or similar field of study

Prior experience conducting and managing IS network and/or cybersecurity audits, or cybersecurity information assurance assessment

Prior experience and working knowledge of Governance, Risk & Compliance (GRC) platforms (i.e., Drata, Logic Manager, ProofPoint, StandardFusion, Workiva, etc.)

Prior experience administering and managing cybersecurity and/or security awareness training platforms and services