> Markdown version of [/jobs/ext/2296430-senior-information-security-officer](https://www.wearedevelopers.com/jobs/ext/2296430-senior-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Security Officer

- **Company:** California Department of Public Health
- **Location:** Sacramento County, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $103,500.0 - $142,860.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Information Management, Single In-Line Memory Module (SIMM), Information Technology
- **Published:** August 29, 2026
- **Apply:** https://www.calcareers.ca.gov/CalHrPublic/Jobs/JobPosting.aspx?JobControlId=528699

## About the Role

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:
Ability to analyze business impact and exposure (based on emerging security threats, vulnerabilities and risks) to recommend IT solutions.
Experience and knowledge of procedures for incident handling, particularly for analyzing incident-related data and determining the appropriate response.
Experience developing policies and documenting work processes to support and enforce security standards.
Experience developing and maintaining technology and disaster recovery plans including preliminary planning, business impact analysis, alternate site selection, recovery strategies, and training and exercise development to support the overall Business Continuity Plan.
Experience monitoring and assessing security controls in the information system on an ongoing basis, documenting changes, conducting security impact analyses, and reporting system security statuses to the organization.
Ability to effectively communicate both in writing and verbally., 2. Describe your experience in developing security policies and practices and documenting work processes.

## Description

The Department of Financial Protection and Innovation is recruiting for one Permanent, Full-time Information Technology Specialist II position within the Information Technology Services Division. This position is to be located in the Sacramento office. This recruitment may be used to fill subsequent vacancies of this position within the next 180 days.
Under the general direction of the Chief Information Security Officer (CISO, IT Manager I) the Information Technology Specialist II will serve as department's Senior Information Security Officer (SISO).
The Senior Information Security Officer (SISO) will ensure DFPI IT systems are protected from threats, lead the response to privacy and security incidents, perform incident investigations and analysis, develop security policies and processes, and report compliance to state and federal agencies. The SISO will assist the CISO in maintaining compliance with state and federal regulations including California Civil Code, the State Administrative Manual (SAM), the Statewide Information Management Manual (SIMM), and the National Institute of Standards and Technology (NIST).


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [How to Navigate Professional Relationships in the Tech Industry](https://www.wearedevelopers.com/videos/1276-how-to-navigate-professional-relationships-in-the-tech-industry)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [APItoolkit: Using Merkle Trees and LLMs to Detect the UnDetectable in Software Monitoring](https://www.wearedevelopers.com/videos/1639-apitoolkit-using-merkle-trees-and-llms-to-detect-the-undetectable-in-software-monitoring)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security)
- [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume)