> Markdown version of [/jobs/ext/2852615-agency-information-security-officer](https://www.wearedevelopers.com/jobs/ext/2852615-agency-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Agency Information Security Officer - **Company:** California Department of Public Health - **Location:** Sacramento County, CA, United States (Remote available) - **Salary:** $136,656.0 - $166,104.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Open Systems Interconnection (OSI) - **Published:** September 11, 2026 - **Apply:** https://www.calcareers.ca.gov/CalHrPublic/Jobs/JobPosting.aspx?JobControlId=531510 ## About the Role Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply. Individuals who are eligible for a Training and Development assignment may also be considered for this position(s)., In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate: * Experience as an Information Security Officer or a Chief Information Officer with specific cyber-Security and Privacy-related responsibilities, including incident response, development/monitoring of compliance, development/implementation of a Plan of Action and Milestone (POAM) associated with security compliance maturity. * Demonstrated experience overseeing the application and/or implementation of information security and data privacy technologies. * Knowledge of information security and data privacy industry best practices. * Demonstrated experience preparing and leading the execution of enterprise security strategies and/or tactical road maps. * Demonstrated experience assessing planned enterprise and solution/service architectures to determine alignment with enterprise security strategies, standards and policies. * Demonstrated ability to collaborate, coordinate, and communicate effectively across all levels of an organization and with external partners and stakeholders including those with regulatory control functions. * Experience developing, implementing, and acting as an advocate for information security best practices and security awareness. * Demonstrated use of and application of cybersecurity, risk management and control frameworks (such as National Institute of Standards and Technology (NIST) Cybersecurity Framework, NIST Risk Management Framework, and NIST 800-53 controls); working knowledge of regulatory requirements including Health Insurance Portability and Accountability Act (HIPAA) and familiarity with MARS-E requirements and the California Information Practices Act. * Demonstrated experience developing and/or providing information security training. ## Description The AISO (IT Manager II) leads the planning and development of the Agency's Information Security Strategy and related policies/standards, and drives corresponding tactical activities aimed at increasing the information security maturity level of CalHHS entities information assets, working closely with all CalHHS entities, the California Department of Technology (CDT) Office of Information security (OSI), and the California Office of Emergency Services (Cal OES), Cyber Security Integration Center (Cal-CSIC) to understand needs and priorities. The AISO supports department information security efforts and assesses compliance with key Agency information security initiatives through oversight and support, working closely with entity Information Security Officers (ISOs) and solution architects. The incumbent acts as an expert and consultant to the CalHHS entities on the implementation of internal and external policies and standards, laws, trends, and best practices regarding information security. The AISO is the CalHHS liaison to the CDT/OIS & CDT IT Policy functions, representing the needs of CalHHS and its entities and communicating CDT policy, guidelines, and requirements to the CalHHS entities ISOs., This position is currently eligible for one telework day per-week and is required to report in-person a minimum of four days per week. The amount of telework is at the discretion of the OTSI and is subject to operational needs., Business travel may be required. All commute expenses to the reporting location will be the responsibility of the selected candidate., Form 700: This position is responsible for the making, participating in the making, or influencing the making of governmental decisions that may potentially have a material effect on personal financial interests. As a result, this position is subject to the California Health and Human Services Agency (CalHHS) Conflict of Interest Code. The selected candidate is required to file a Statement of Economic Interests (Form 700) when assuming office, annually while in office, and upon leaving office. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What Makes Open Source Work: Licensing and Beyond](https://www.wearedevelopers.com/videos/1416-what-makes-open-source-work-licensing-and-beyond) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Going Quantum: The future of the internet ...](https://www.wearedevelopers.com/videos/672-going-quantum-the-future-of-the-internet) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)