Shane Lee

The Information Security Officer (ISO) is responsible for assisting with the day-to-day operations of securing the county's various information systems. Reporting to the Deputy Director of Information Technology, the ISO is tasked with providing technical expertise in all areas of network, system, and application security for the entire county network including supported sub-agencies. The ISO works closely with the various teams in the Information Technology department, county departments, and allied agencies (Metcom, St.

Mary's County Health Department, St. Mary's County Libraries, St. Mary's County Public Schools, etc.) that utilized county infrastructure to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls.

The ISO leads the county-wide Cyber Security Planning Committee with county, state, and federal Cybersecurity compliance for all county and county allied agencies.

Cyber Security Information Officer - St Mary's County Government - Leonardtown, MD

(2026-07-01)

The Information Security Officer (ISO) is responsible for assisting with the day-to-day operations of securing the county's various information systems. Reporting to the Deputy Director of Information Technology, the ISO is tasked with providing technical expertise in all areas of network, system, and application security for the entire county network including supported sub-agencies.

• Monitor online security-related resources for new and emerging cyber threats
• Ensure compliance with county, state, and federal cybersecurity laws and policies
• Proactively monitor the network environment to detect and implement steps to mitigate cyber-attacks before they occur
• Provides technical expertise regarding security-related concepts to operational teams within the Information Technology Department and the entire county government network
• Assesses new security technologies and threats to determine potential value to protect and defend the enterprise
• Prepare for, review, investigate, report, and respond to real-time alerts within the environment
• Review real-time and historical reports for security and/or compliance violations
• Reviews vulnerability assessments of the county's systems and networks and implements corrective actions and polices to improve cyber posture
• Supervises assigned staff
• Performs other duties as assigned

Four-year college degree or equivalent industry training and certifications