Cybersecurity Program Lead (Information System Security Manager)
DCL seeks an experienced security leader to serve as the cybersecurity lead and single point of contact for DCL’s work on a high-visibility Maryland human-services program. You will own the security plan, govern security controls across contractor-managed systems (case management, document management, call center telephony/IVR, and integrations with State enterprise platforms), and coordinate with the prime contractor’s technology lead and State IT security staff. This is a part-time leadership role for someone who can set direction, make sound risk calls, and keep a small team focused.
- Location
- Hybrid — Baltimore, MD area (within 50 miles of downtown Baltimore)
- Engagement type
- W-2 part-time (1099 considered)
- Pay range
- $68.00–$85.00 per hour, based on experience and certifications
- Schedule
- About 20 hrs/week during the 4-month transition-in, then about 10 hrs/week
- Start
- Contingent upon contract award (anticipated spring 2027)
This position is contingent upon contract award to DCL’s prime contractor partner and execution of DCL’s subcontract. Anticipated start is spring 2027 (subject to the State’s award timeline), beginning with a four-month transition-in period.
Key responsibilities
- Lead DCL’s security workstream during transition-in, including security and privacy discovery, control review, Security Plan development, and cutover and stabilization support.
- Own and maintain the program Security Plan and control documentation aligned to State of Maryland (DoIT) security policy and applicable federal standards (e.g., NIST SP 800-53).
- Govern security risk: maintain the risk register, approve remediation priorities, and brief the prime contractor’s Technology Solutions Manager and State IT security staff.
- Direct DCL’s security engineer, compliance and privacy analyst, and continuity specialist; review deliverables for accuracy and completeness.
- Coordinate incident escalation and serve as DCL’s security lead during significant security events.
Required qualifications
- 8+ years of information security experience, including at least 3 years leading security programs or teams.
- Current CISSP or CISM certification.
- Hands-on experience with NIST SP 800-53 control implementation, security plans, and risk management in a government environment.
- Experience coordinating with system owners and third-party technology teams on secure integrations.
- Clear written and verbal communication with executives and non-technical stakeholders.
- Authorized to work in the United States; all work must be performed within the continental United States.
- Ability to pass a background check and to complete required State of Maryland security and privacy training and confidentiality agreements before accessing program systems or data.
Preferred qualifications
- Experience supporting state or federal public-benefit or human-services programs that handle personally identifiable information (PII).
- Familiarity with State of Maryland DoIT security policies, Salesforce platform security, or call center/IVR environments.
- Experience with SOC 2 audits or ATO packages.
- Veterans and military spouses are encouraged to apply.
Apply for Cybersecurity Program Lead (Information System Security Manager)
Email a current resume, copies of your certifications, your availability, and confirmation of the pay range to careers@dummarsconsultants.com with the subject line “Cybersecurity Program Lead — DCL Baltimore.” Applications are reviewed on a rolling basis.
Email careers@dummarsconsultants.comDummars Consultants LLC is an Equal Opportunity Employer. As a Service-Disabled Veteran-Owned Small Business (SDVOSB) and SWaM-certified firm, we are committed to a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by federal or Maryland law. All candidate information is handled in confidence.