DMI is a leading global provider of digital services working at the intersection of public and private sectors. With broad capabilities across IT managed services, cybersecurity, cloud migration and application development, DMI provides on-site and remote support to clients within governments, healthcare, financial services, transportation, manufacturing, and other critical infrastructure sectors. DMI has grown to over 2,100+ employees globally and has been continually recognized as a Top Workplace in both regional and national categories.

DMI, LLC is seeking a Security Awareness Training /SME to join us. 

Duties and Responsibilities:

One of the key responsibilities within the Department of Information Technology (DoIT), via the direction of the State Chief Information Security Office (SCISO), is the management and oversight of a Statewide Security Awareness Training Program for all State employees and contractors, estimated to date at 50,000 plus users. DoIT would like to engage in making several structured improvements to the cybersecurity training and awareness program and continued operations of the program. Detailed responsibilities include, but are not limited to:

• Reviews and develops a Statewide policy that establishes the requirements, scope, roles, responsibilities, and management commitment for security awareness and training, including privacy awareness of training (“training”) that is congruent with State and Federal laws, executive orders, directives, regulations, policies, standards, and guidelines.
• Reviews, develops, plans, and coordinates the dissemination of pertinent awareness training materials that includes: a. Initial awareness training for new employees; b. Monthly microlearning training based on current events, incident lessons learned, or the top human risks to the organization; c. Quarterly education and awareness briefings with stakeholders; d. Annual privacy training; and e. Annual role-based training.
• Responsible for developing, planning, and coordinating the curriculum and resources supporting the annual security awareness summit held every October.
• Identifies key metrics to monitor for ensuring the effectiveness of the program and develops strategies to improve the metrics each performance period.
• Performs administrative duties in the security awareness training platform, including but not limited to, account provisioning/deprovisioning, report creation and delivery, campaign administration, and troubleshooting platform and user issues.
• Responsible for requirements development and the evaluation of new security awareness training platforms.
• Develops and monitors processes to ensure all appropriate employees are enrolled in the security awareness training platform and receives all mandatory and discretionary training.
• Develops and maintains awareness content for the Maryland.gov security awareness training webpage.

Education and Years of Experience:

• Bachelor's degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline. 

Required and Desired Skills/Certifications:

• Minimum of 10 years’ experience in the information technology field with a focus on security awareness, privacy, and/or cybersecurity.
• At least five (5) years’ experience designing and maturing a medium to large size organization’s security
• awareness training program. 

 Additional Requirements:

• At least three (3) years’ experience working with and/or administering the Proofpoint Security Awareness Training platform
• CISSP, CISM, CDPSE, CRISC, or CIPM certification
• Policy, process, and procedure development with the ability to translate information to respective documentation
• Ability to provide guidance and advice to management on cybersecurity education and awareness strategies
• Develop system related requirements for solicitations
• Managing or providing direct work products for security awareness training programs
• Ability to communicate and coordinate well with others, inclusive of good oral and written skills
• Ability to create executive level presentations and host virtual training sessions

Min Citizenship Status Required: H1B

Physical Requirements: No Physical requirement needed for this position.

Location: Crownsville, MD 

Hybrid- (3 days telework, 2 days in-person) Must be able to travel to both the Maryland Department of Information Technology (DoIT) office located in Crownsville, MD, and agencies within the Baltimore/Annapolis region.
100 Community Place
Crownsville, MD 21032