Information Technology Specialist III, Information Security Officer (ISO)

California Department of Public Health
Sacramento County, CA, United States
7 days ago
Apply on www.calcareers.ca.gov
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
2 years minimum
Compensation
$114,084.0 - $152,880.0
Working hours
Regular working hours

Tech stack

Cyber Security Information Systems Information Security Management Intrusion Detection and Prevention Information Systems Security Architecture Professional Information Technology

Job description

The Office of the Secretary of State is recruiting a permanent full-time Information Technology Specialist III (ITS III) as Information Security Officer for the department. Under the administrative direction of the Chief Information Security Officer (CISO), the Information Technology Specialist III serves as the Secretary of State (SOS) Information Security Officer (ISO) with full management responsibility for establishing and managing the most complex operation of the SOS Information Security and Cybersecurity domains. The ISO will lead and manage information security and awareness, training, intrusion prevention, incident response, tabletop exercises, risk assessment, and compliance reporting to the California Department of Technology (CDT). The ISO ensures that the organization’s information assets are protected from unauthorized access, disclosure, alteration, destruction, or theft. The ISO is also responsible for promoting the organization’s awareness of information security issues. The incumbent will collaborate with the Information Technology Division, Risk Management, Audits, and Executives to mature the information security program to develop security policies and standards to ensure confidentiality, integrity, and availability of information assets.

  • The ISO will help develop and maintain an information security strategy and program that aligns with the organization’s goals and objectives.
  • Conduct regular risk assessments to identify potential security threats and vulnerabilities. Develop and maintain policies, procedures, and standards for information security and ensure that they are followed throughout the organization.
  • Conduct regular security assessments and vulnerability testing to identify and mitigate potential security risks and threats. Monitor security logs and alerts to identify potential security incidents and respond promptly to mitigate risks and minimize impact.
  • The ISO primarily advises the CIO, Chief Information Security Officer, and Chief Deputy Secretary on response activities that may result in press releases, substantial costs, and potential lawsuits and fines. The ISO may be involved in highly confidential investigations of employee misuse or policy violation., Supplemental Questionnaire: Applicants must submit a Supplemental Questionnaire responding to the questions listed below, it should be no more than two (2) pages typed, using business professional font, font size, and formatting. Responses need to include the question and must be numbered in the same order. Applications submitted without the Supplemental Questionnaire will not be considered. 1. Describe how you would implement an information security strategy and program 2. Describe your experience conducting data and systems categorization for critical infrastructure., Position provide telework opportunities based upon the agency’s telework policy and business needs. All employees who telework are required to be California residents, in accordance with Government Code 14200, and will be required to report to the Secretary of State’s Headquarters (Sacramento). Candidates who reside outside of the state of California may be interviewed; however, the selected candidate must have a primary residency in the state of California prior to appointment (and continue to maintain California residency) as a condition of employment. Failure to meet this requirement may result in the job offer being rescinded.Occasional off-hours and weekends may be required, The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:
  • Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
  • Resume is required and must be included.
  • Supplemental Application - Please provide your responses to the supplemental questions as directed above.

Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.

Requirements

  • Bachelor’s degree in computer science, Information Systems, Business Administration, or in any engineering field preferred
  • Strong leadership skills in highly complex environments that have competing priorities and demands
  • Effective written, verbal, interpersonal, and analytical skills
  • Certified information systems security professional (CISSP)
  • Certified Information Security Manager (CISM)
  • At least two years as a security Lead.
  • Risk Management
  • Information Security Program
  • Security Policy
  • Compliance
  • Cyber Security
  • Incident response and security reporting, Education: When using education to meet minimum qualifications, education must include the specified information technology or closely related coursework. Please include all the required documents necessary to verify that you meet the minimum qualifications for this classification (i.e., degree, transcript, license, and certificate). If your degree is not in one of the specified degrees as stated in the Class Specifications, please provide a copy of your most recent unofficial transcripts to be evaluated for comparability. Candidate may be required to provide a transcript prior to hire.

About the company

The Office of the Secretary of State (SOS) consists of nearly 750 dedicated public servants who uphold the rights of Californians while also striving to make our government, elections, and businesses both accessible and transparent. Led by an elected leader, accountable to the public, we are dedicated to fostering career development opportunities and growing a skilled workforce that embraces inclusion and values diversity.

Located in downtown Sacramento, the SOS building is within walking distance to a variety of eateries and amenities. Light Rail, State Capitol, Downtown Commons (DOCO), and Golden 1 Center, just to name a few. Conveniently located in the SOS building, the Gold Rush Grille offers delicious daily specials for breakfast or lunch and is open to the public. Our on-site childcare incorporates programs for children six weeks to five years old. Priority waitlist access and special discounted rates are available for SOS employees.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.calcareers.ca.gov
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

59 sec

Proving regulatory compliance to auditors and chief officers

Mike Bursell Mike Bursell · World Congress 2026 Europe

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

42 sec

Energy forecasts and resource demands of information technology

Marjolein Pordon · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

2:28 min

Preventing sensitive information disclosure in RAG systems

Deepu Deepu · World Congress 2025

2:46 min

Missing equipment retrieval processes for departing employees

Jasmin Azemović Jasmin Azemović · World Congress 2026 Europe

Videos

See all

Related articles

See all