Knowledge Bank Information Security & Privacy Officer

This position is limited term for 12 months but may be extended for an additional 12 months, not to exceed 2 years. This position may become Permanent/FT pending budget approval.

Under administrative direction of the Governor’s Office and Land Use and Climate Innovation (LCI) Information Technology Manager II, (Chief of Knowledge Bank and Platform Services), the Information Technology Specialist III (ITS III), Knowledge Bank Information Security and Privacy Officer serves as the lead privacy, data protection, security governance, and compliance analyst supporting the statewide Knowledge Bank initiative and related enterprise technology platforms.

The incumbent is responsible for leading enterprise privacy, data protection, and security governance activities to help ensure Knowledge Bank services, CEQA modernization systems, permitting coordination capabilities, cloud environments, public-facing systems, operational workflows, vendor solutions, and supporting infrastructure comply with State of California privacy laws, security requirements, audit standards, accessibility mandates, records management obligations, and enterprise governance frameworks.

The position supports statewide modernization initiatives by integrating privacy-by-design, security-by-design, accessibility, records management, operational governance, auditability, and compliance requirements into Knowledge Bank operations, application development efforts, procurement activities, enterprise workflows, service design, release planning, vendor oversight, and long-term technology planning while coordinating closely with the department’s Information Security Office and enterprise security leadership. This position will also serve as a liaison between LCI program areas, agency partnerships, and third-party providers., The Governor’s Office of Land Use and Climate Innovation (LCI) serves the Governor and his Cabinet as staff for long-range planning and research and constitutes the comprehensive state planning agency. LCI assists the Governor and the Administration in planning, research, policy development, and legislative analysis. LCI formulates long- range state goals and policies to address land use, climate change, population growth and distribution, urban expansion, infrastructure development, groundwater sustainability and drought response, and resource protection. LCI’s budget programs include State Planning and Policy Development, Strategic Growth Council, and Racial Equity Commission. LCI is a fast-paced, creative work environment that requires staff to have strong collaboration skills, an ability to quickly respond to changing policy needs, and a positive attitude and sense of humor. Proven commitment to creating a work environment that celebrates diverse backgrounds, cultures, and personal experiences.

Telework

This position is eligible for hybrid work in accordance with the Governor’s Executive Order N-22-25 and at the sole discretion of LCI under California Government Code Section 14200. The incumbent is required to report in-person and site-based four days per week. All telework schedules are subject to change and may be re-evaluated at any time. The incumbent will be expected to report for in office work and attend work related in-person events as deemed operationally necessary. Telework does not change the terms and conditions of employment, the essential functions of job duties, or required compliance with LCI policies., * Managed or led all security program control initiatives across administrative, physical, and technical domains.

• Governance, Risk, and Compliance audit preparedness.
• Ability to integrate information security requirements into the acquisition process, using applicable baseline security.

controls as one of the sources for security requirements, ensuring a robust software quality control process.

• Ability to identify critical infrastructure systems with information and communication technology that were designed without system security considerations.

• Experience writing technical documentation for workflows, plans, guidelines, policies, standards and procedures to meet business requirements for security assurance and compliance., Using the online application system as specified in the announcement is the preferred method of applying for civil service job opportunities; however, applicants may instead apply by way of U.S. mail, parcel delivery or courier service, or in person, as set forth in this announcement. All information regarding your employment history must be included on the State Employment Application STD. 678. Applications that are submitted blank or with “see resume” in place of duties performed or applications received without the following information for each job entry will be considered incomplete and will not be accepted:

• “To” and “from” dates (month/day/year)
• Hours worked per week
• Private sector job titles
• Supervisor name and phone number
• Job duties performed
• State employees must list the specific departments for which they worked and indicate the specific civil service classification titles held (not working titles). Transcripts If you are meeting minimum qualifications with education, you must include your unofficial transcripts for verification. Foreign transcripts must include official verification of U.S. equivalency prior to appointment by an organization found here. Personal Identifying Information Please do not include your Social Security Number, date of birth, veteran status, personal photos, LEAP information, or any other personally identifying information on any documents in your application package.

Persons appointed to this position must be reasonably expected to lift, carry, push, pull, or otherwise move objects weighing up to 30 lbs. with or without a reasonable accommodation. This position involves sitting most of the time and may involve walking or standing for brief periods of time. This position may be eligible to participate in LCI’s hybrid telework schedule. Participation in telework is subject to LCI’s guidelines. Occasional extended hours outside of normal working business hours may be required., * Ability to maintain consistent attendance

• Ability to demonstrate punctuality, initiative, and dependability
• Ability to work independently, while working with others in a small group environment, In addition to evaluating each candidate’s relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:
• Experience with risk management processes (e.g., methods for assessing and mitigating risk).
• Experience with frameworks, laws, regulations, policies, and ethics related to cybersecurity and privacy.
• Applicable business processes and operations of customer organizations.
• Business continuity and disaster recovery continuity of operations plans.
• Vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
• Information security program management and project management principles and techniques.
• Prior CISO/ISO and Privacy Officer experience.
• Currently certified in one or more of the following: CISM, CRISC, CDPSE.
• Experience with the State Administrative Manual (SAM) resource and compliance requirements.
• Experience with Office of Information Security (OIS), State Information Management Manual (SIMM) compliance requirements.

There are many benefits to joining our team! We offer competitive pay, advancement opportunities, upward mobility, work-life-balance, and for many positions, flexible hours and remote work options. The State of California offers a competitive and comprehensive benefits package, subject to eligibility, such as:

• Pension through CALPERS
• Medical Benefits, including health, dental, and vision insurance
• Medical benefits into retirement
• Deferred Compensation options: 401k and 457b
• Leave benefit options (Vacation/Sick or Annual Leave)
• Paid Holidays
• Life Insurance
• ScholarShare (College Saving Account)
• School Loan forgiveness under the federal Public Service Loan Forgiveness Program Benefit information can be found on the CalHR website and the CalPERS website.