Director, Audit Response & Compliance Operations (DoIT Technology Platform Director I)

Introduction

The Department of Information Technology (DoIT) leads the State in the creation and implementation of information technology solutions that improve IT infrastructure and government services and keep Maryland current within IT industry trends. Within DoIT, the Compliance Unit safeguards the integrity of the Stateâs IT operations by ensuring that audit, regulatory, and policy obligations are met with rigor, transparency, and enterprise-wide consistency. As a newly established function, Compliance Unit is building the structure, standards, and tooling that will define how Maryland responds to audit and regulatory scrutiny for years to come. This is an exciting opportunity to shape an enterprise capability from the ground up.

GRADE

STD 0024, $67.15 to $73.98 Contractual positions pay by the hour. This is equivalent to: $140,052 to $154,304.

LOCATION OF POSITION

100 Community Pl., Crownsville, MD 21038

POSITION DUTIES

This position is the operational execution of Maryland DoITâs enterprise audit response function, exercising day-to-day command authority over the State Audit Response Operating Model (SAROM). SAROMÂ is DoITâs foundational governance framework for audit response, defining the accountability model, intake standards, routing logic, escalation paths, and reporting cadence used to manage Office of Legislative Audits (OLA) requests, external audits, corrective actions, and policy attestations.

Operating as the SAROM control tower, this role audit response from a reactive, ad-hoc activity into a disciplined enterprise workflow, setting service levels, enforcing standards, driving accountability across agencies, and maintaining the system of record for all audit related obligations. The position carries significant influence across DoIT and partner agencies, acting as the central authority on how audit work is received, prioritized and executed. The role requires sound judgement in balancing competing demands from legislative auditors, executive leadership, and agency stakeholders, often under tight deadlines and high visibility conditions. Beyond day-to-day operations, this role shapes the maturity of the Stateâs compliance posture by identifying systematic gaps, recommending process improvements, and codifying repeatable practices. Success in this position strengthens public trust in how Maryland manages its technology investments and regulatory commitments.

Reporting Structure

This position reports directly to the Senior Director of Compliance within the Department of Information Technology and operates as the senior operational lead for the SAROM function. The role works in close coordination with DoIT executive leadership, agency compliance liaisons, the Office of Legislative Audits, and external audit partners, and may provide functional directions to analysts, coordinators, or contractors supporting audit response activities.

• This is a contractual position with limited benefits*Â

Position ResponsibilitiesÂ

• Direct enterprise intake operations across email and ServiceNow, ensuring every audit request â internal, external, or legislative â is formally captured, classified, and accountable to a defined owner from the moment it enters the organization.Â
• Establish and enforce service level expectations, escalation thresholds, and operational throughput standards to prevent response degradation, missed commitments, or reputational exposure.Â
• Govern workflow and routing automation so requests are assigned to the correct owners on first touch and escalated when delays or risks emerge.
• Serve as steward of the authoritative audit repository, standard templates, operating procedures, and record retention discipline, preserving evidentiary integrity and audit defensibility.
• Lead cross agency response coordination to deliver unified submissions, consistent messaging, and full enterprise visibility into open audit obligations and corrective actions.
• Produce executive level reporting on audit posture, throughput, aging, and risk trends to inform Senior Leadership and external stakeholders.
• Drive continuous improvement of SAROM by analyzing performance data, capturing lessons learned from completed engagements, and evolving intake, routing, and escalation standards to keep pace with changing regulatory and operational demands.
• Partner with DoIT leadership, agency liaisons, and external auditors to build trusted working relationships, clarify expectations, and resolve disputed or ambiguous findings before they escalate.

MINIMUM QUALIFICATIONS

Education: Bachelorâs degree in Information Technology, Computer Science, Information Systems, Business Administration, Accounting/Finance, or a related field.

Experience: Three (3) yearsâ experience in creating and maintaining an audit/compliance program for an organization of over 100 or more employees in an information technology environment. This would include risk management and/or quality assurance.

Note: Candidates may substitute two additional years of qualifying experience for the degree requirement.

DESIRED OR PREFERRED QUALIFICATIONS

Preference will be given to applicants who possess the following preferred qualification(s). Include clear and specific information on your application regarding your qualifications.

• Experience creating and maintaining an audit/compliance program in a public sector information technology environment (county, state, or federal).Â
• Hands-on experience working in a system of record that uses workflow configuration and reporting, such as ServiceNow to track audit/compliance information.

EXAMINATION PROCESS

The assessment may consist of a rating of your education, training, and experience related to the requirements of the position. It is important that you provide complete and accurate information on your application. Please report all experience and education that is related to this position.

BENEFITS

Contractual employees who work for an agency covered under the State Employee and Retiree Health and Welfare Benefits Program, have a current employment contract and work 30 or more hours a week (or on average 130 hours per month) may be eligible for subsidized health benefits coverage for themselves and their dependents. As a contractual employee, you will be responsible for paying 25% of the premiums for your medical and prescription coverage, including any eligible dependents you have enrolled. The State of Maryland will subsidize the remaining 75% of the cost for these benefits. You can also elect to enroll in dental coverage, accidental death and dismemberment insurance, and life insurance, but will be responsible to pay the full premium for these benefits.

Leave may be granted to a contractual employee at a rate of one hour for every 30 hours worked, not to exceed 40 hours per calendar year.

FURTHER INSTRUCTIONS

Online applications are highly recommended. However, if you are unable to apply online, the paper application and supplemental questionnaire may be submitted to: Department of Budget and Management, Recruitment and Examination Division, 301 W. Preston St., Baltimore, MD 21201. Paper application materials must be received in our office by the closing date for the recruitment. No postmarks will be accepted.

For questions regarding this recruitment, please contact the DBM Recruitment and Examination Division at Application.Help@maryland.gov or 410-767-4850, MD TTY Relay Service 1-800-735-2258.

We thank our Veterans for their service to our country.

People with disabilities and bilingual candidates are encouraged to apply.

As an equal opportunity employer, Maryland is committed to recruitment, retaining and promoting employees who are reflective of the State''s diversity.