INFORMATION TECHNOLOGY SPECIALIST II

Recognizing that California’s over-65 population is projected to grow to 8.6 million by 2030, Governor Gavin Newsom issued Executive Order N-14-19 calling for the creation of a Master Plan for Aging to be developed by December - 2020. The Master Plan will serve as a blueprint that can be used by state government, local communities, private organizations and philanthropy to build environments that promote healthy aging. CDA will play an integral part in the development and implementation of the Master Plan. To learn more about CDA, visit: https://www.aging.ca.gov/ To learn more about the Master Plan for Aging activities and status, visit: https://mpa.aging.ca.gov/ To learn more about the Master Plan and the Governor’s Executive Order, visit: https://www.chhs.ca.gov/home/master-plan-for-aging/ Special Requirements Please ensure your application is complete with detailed job descriptions/tasks performed, employment beginning and ending date information, and hours worked per week. If you are using education to meet one of the patterns of the minimum qualifications, please upload a copy of your degree or transcripts with your application package. This position is designated under the Conflict of Interest Code. The position is responsible for making or participating in the making of governmental decisions that may potentially have a material effect on personal financial interests. The appointee is required to complete Form 700 within 30 days of appointment and once per year. Failure to comply with the Conflict of Interest Code requirements may void the appointment. Do NOT include ANY confidential information to your application on any documents you submit for a job vacancy, such as your State application, resume, or educational transcripts. Confidential information that should be excluded or removed from these documents includes, but is not limited to, your Social Security Number (SSN), birthdate, student identification number, driver’s license number (unless required), basis of eligibility, examination results, Limited Examination and Appointment Program (LEAP) status, medical information, marital status, and age. Confidential information on the first page of the applications submitted electronically online, such as Easy ID number, SSN, examination related information, and driver’s license number will automatically be redacted upon submission. Possession of Minimum Qualifications will be verified prior to interview and/or appointment. If you are meeting Minimum Qualifications with education, you must include your unofficial transcripts/diploma for verification. Official transcripts may be required upon appointment. If it is determined a candidate does not meet the Minimum Qualifications, the candidate will be withheld from the eligibility list, rendering them inactive and ineligible to be hired for the position. Candidates who have been withheld may file and appeal with the State Personnel Board. If you are using education to meet the minimum qualifications, please include a copy of your unofficial transcripts for verification. Foreign transcripts must be accompanied by an academic credential evaluation. Below is the link to a list of approved agencies.

• Foreign Transcripts Evaluation (CL-635)

Application Instructions

Completed applications and all required documents must be received or postmarked by the Final Filing Date in order to be considered. Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application. Final Filing Date: 5/27/2026

Do you have experience in Zoom?, Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply. Individuals who are eligible for a Training and Development assignment may also be considered for this position(s)., In addition to evaluating each candidate’s relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Excellent communication skills, interpersonal skills and collaborative skills, and the ability to communicate cybersecurity and risk-related concepts to technical and nontechnical audiences at various levels.
• Knowledge and experience with information security frameworks such as ISO/IEC 2700127002, ITIL, COBIT, NIST, including 800-53 and Cybersecurity Framework
• Working knowledge of cybersecurity risk management and cybersecurity technologies.
• Experience developing and maintaining security policies and procedures.
• Experience developing, maintain and testing technology recovery solutions.
• Security related certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar credentials.
• Experience with incident response within a security operations center.
• Experience with incident response tools and technologies, including tools for security information and event management (SIEM), forensics, and threat intelligence.
• Ability to communicate complex technical issues to diverse audiences, orally and in writing, in an easily understood and actionable manner.
• Understands business needs and commitment to delivering high-quality, prompt and efficient service to business customers.
• Experience with regulatory compliance, risk management frameworks and information security management frameworks.
• In-depth knowledge of cybersecurity principles, technologies, and controls, including threat and vulnerability management, incident response, and security awareness.
• Ability to interpret and apply complex compliance requirements such as HIPAA., 2. Describe your experience with information security compliance. Please include any experience related to control agency relationships and coordination. 3. Describe an innovative and/or creative solution you implemented that improved your organizations security posture. *** For helpful guidance on writing an effective SOQ or a Supplemental Questionnaire, please visit Work4CA: How to Write a Statement of Qualifications

The physical work location of the position is designated at the department’s headquarters location, a three-story building and standard office modular workspace located in Natomas. The duties of the position require sitting for long periods of time while using a personal computer, reviewing documents, and attending meetings whether they are digital (i.e., Zoom, WebEx, MS Teams, etc.) or in person., In addition to competitive public employee wages and a comprehensive benefits package, our employees enjoy meaningful and interesting work that supports access to programs and services that serve older adults, adults with disabilities, family caregivers, and residents in long-term care facilities throughout California. To learn more about benefits for State employees, visit the Benefit Summary page on the CalHR website. CDA is located close to downtown and is easily accessible from various main thoroughfares (i.e. Interstate-5 and Inerstate-80). Employees enjoy a great team environment with amenities including: FREE PARKING and close to various dining and shopping choices in the Natomas area.

The Position is headquartered in Sacramento. Effective July 1, 2025, The California Department of Human Resources (CalHR) implemented the Personal Leave Program 2025 (PLP 2025). PLP 2025 directs that each employee shall receive a 3 percent reduction in pay in exchange for 5 hours PLP 2025 leave credits, monthly. The salary range(s) included in the job advertisement do not reflect the 3 percent reduction in pay. Under the general direction of the Information Technology Manager I (ITM I) Information Security Officer (ISO), the Information Technology Specialist II (ITS II) serves as a cybersecurity advisor and provides technical security expertise to the ISO as the Assistant Information Security Officer (Asst. ISO). The Asst. ISO implements and maintains security governance and the associated frameworks and processes. The Asst. ISO serves a critical function in the development, implementation, and maintenance of cybersecurity policy training. Other key functions include risk and compliance management, incident response and technology recovery testing and planning; evaluation and implementation of security controls; audit planning and reporting; security assessments; supporting the Department’s security awareness training platform and processes; and developing and sustaining cooperative working relationships with all stakeholders., The California Department of Aging (CDA) administers programs that serve older adults, adults with disabilities, family caregivers, and residents in long-term care facilities throughout the State. The Department administers funds allocated under the federal Older Americans Act, the Older Californians Act, and through the Medi-Cal program.