> Markdown version of [/jobs/ext/1478072-information-security-officer](https://www.wearedevelopers.com/jobs/ext/1478072-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Officer - **Company:** California Department of Public Health - **Location:** Sacramento, CA, United States (Remote available) - **Salary:** $78,156.0 - $126,444.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management, Generative AI, Information Technology - **Published:** July 29, 2026 - **Apply:** https://www.calcareers.ca.gov/CalHrPublic/Jobs/JobPosting.aspx?JobControlId=524481 ## About the Role In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate: * Expert level understanding of ISO 27001 and NIST 800-53 standards. * Experience in developing and implementing information security awareness training advisories, notices, and campaigns. * Experience in information security incident handling and response. * Expertise in conducting risk assessments to identify security and privacy risks, and in performing comprehensive gap analyzes. * Experience conducting contract reviews from an information security and privacy perspective. * Expertise in the development, management, and maintenance of information security and privacy policy, process, and procedure documentation. * Experience in process improvement, strategic planning, information security governance, and risk management practices. * Knowledge of governance of generative artificial intelligence. * Excellent interpersonal and customer service skills with the ability to adjust to changing priorities and quickly respond to urgent matters while keeping an Enterprise perspective and demonstrating initiative, ownership, accountability, and independence. * Excellent written and verbal communication skills and conducting presentations before audiences of all levels and size. ## Description Under the direction of the California State Lottery's (Lottery) Information Security & Privacy Manager, the Information Technology Specialist I (ITS I) will assist the Information Security and Privacy Office (ISO) in its mission of ensuring the confidentiality, integrity, and availability of Lottery Information Assets. The duties for this position are focused on the Information Security Engineering domain; however, work may be assigned in other domains as needed., This position is headquartered in Sacramento and is eligible for a hybrid telework schedule. Employees must be able to report to their assigned headquarters office as assigned. Travel expense to and from the assigned headquarters are the responsibility of the employee. Eligibility for telework requires the employee to reside in California per California Government Code Section 14200 which states: "telecommuting means the partial or total substitution of computers or telecommunication technologies, or both, for the commute to work by employees residing in California., 1. Schedule: 8:00AM to 5:00PM PST (After hours may be needed to ensure the Information Security and Data Privacy duties for the California State Lottery) 2. Minimal: On demand travel may be required to facilitate / participate in information security and privacy related audits. 3. Other: The incumbent must maintain an expert level understanding of best practices related to Information Security and Privacy. The incumbent will work in a fast-paced environment with competing priorities, and mission critical deliverables., The SOQ is limited to two pages total, Arial 12-point font, single spaced, standard margins. Resumes and cover letters do not take the place of the SOQ, with a non-submission leading to disqualification. The SOQ is a narrative discussion of how your education, training, experience, knowledge, skills, and abilities meet the minimum qualifications for this position. The following qualifications are critical factors in job success for the Information Security Officer position. The SOQ must be numbered and include each below SOQ prompt typed in bold font. Respond to each SOQ item in the same order they are listed and provide specific examples. By submitting this SOQ, you are certifying that you have read and understood the above instructions and that all information provided in the SOQ is true to the best of your knowledge. 1. Describe your information security and privacy education and experience, providing a recent example where your skillset was utilized. 2. Describe your experience in information security incident handling, conducting contract reviews, and developing information security awareness training. 3. Describe your experience, using an example, where you conducted a risk assessment or gap analysis to identify security and privacy risks. Please provide any emphasis on specific security frameworks and the outcome of the assessment. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Your imaginations is (no longer) the limit: how Generative AI empowers people to be creative](https://www.wearedevelopers.com/videos/741-your-imaginations-is-no-longer-the-limit-how-generative-ai-empowers-people-to-be-creative) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)