> Markdown version of [/jobs/ext/3235824-information-security-analyst-iii](https://www.wearedevelopers.com/jobs/ext/3235824-information-security-analyst-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst III - **Company:** County of Sacramento - **Location:** Sacramento, CA, United States - **Experience:** Experienced - **Salary:** $108,033.0 - $137,871.0 - **Contract:** Temporary contract - **Skills:** Software Applications, Computing Platforms, Spreadsheets, Cyber Security, Information Systems, Databases, Desktop Computing, Disaster Recovery, Text Processing, Identity and Access Management, Information Technology Security Auditing, Data Processing, Cyber Threat Analysis, Information Technology - **Published:** September 17, 2026 - **Apply:** https://careersingovernment.com/job/3022375/information-security-analyst-iii/ ## About the Role Two years (2) of full-time paid professional experience in information security or closely related field, with experience in one or more of the following areas: conducting in-depth risk analyses, developing advanced security controls, and leading security or compliance projects and initiatives. Note: Completion of coursework in Cybersecurity, Computer Science, Information Systems, Information Technology, or other field closely related to the intent of the class at an accredited college or university may be substituted for up to one year of the required experience. Related education substitutions for the required experience are computed on the basis of 3 semester units or 4.5 quarter units = 1 work month. Note: If the word "experience" is referenced in the minimum qualifications, it means full-time paid experience unless the minimum qualification states that volunteer experience is acceptable. Part-time paid experience may be accumulated and pro-rated to meet the total experience requirements., Persons who have special skills required by some (but not all) positions in a class may be certified ahead of others provided that: Such special skills are based on the duties and requirements of the positions and are in conformance with merit system and equal opportunity principles, and The certification of eligibles who possess special skills have been approved by the Civil Service Commission. ## Description This is a continuous filing exam. Next filing cut-offs are at 5:00 pm on: 10/2/2026, 10/16/2026 (Final) Under general supervision, leads, plans, schedules, and oversees the work of Information Security Analysts Level I/II (ISA I/II) while performing the same and/or more difficult duties as those being led; ensures completion of tasks in accordance with established policies and procedures; communicates policies, procedures, and job expectations; and provides training to staff. Utilizes skills that require technical expertise and an understanding of complex information security programs, integrating privacy and security concerns with, with, and fostering, an accountable and information security-conscious culture. The Information Security Analyst III (ISA III) is responsible for ensuring that the County's security and privacy posture stays in alignment with County policies, standards, and guidelines and all applicable Federal, State, and local laws through ongoing testing and periodic auditing. Examples of Knowledge and Abilities Knowledge Of: * Principles and practices of leadership, mentoring, and training * Applicable federal, state, and local laws, codes, and regulations * Operational characteristics, services, and activities of assigned programs and functions * Enterprise Networking, Identity Management, and Data Processing Technologies * Office procedures, methods, and equipment including computers and applicable software applications such as word processing, spreadsheets, databases, and other specialized applications related to area of assignment * English usage, spelling, grammar, and punctuation * Information security solutions for data, application and infrastructure protection * Metrics that demonstrate information security control effectiveness * Regulatory changes that affect information security policy, standards and procedures * Corrective actions to comply with applicable regulations and policies * Security issues, techniques and implications across all existing computer platforms * Security auditing and disaster recovery design * Risk assessment methods and technologies * Legal and regulatory security developments * Reporting on information security Ability To: * Lead and train Information Security Analyst Level I/II staff * Plan, coordinate, assign, and review the work of staff * Identify and respond to advanced persistent threats * Provide work direction and instruction * Research and evaluate work problems, and recommend solutions * Develop and maintain cooperative, effective working relationships with others * Communicate clearly and concisely, both verbally and in writing * Interpret and apply applicable federal, state, and local laws, codes, and regulations * Apply customer service skills, including the identification of customer needs and follow up to ensure customer commitments have been met * Develop metrics to demonstrate information security control effectiveness * Keep apprised on information security policy, standards and procedures * Define information security services to meet business needs * Recommend corrective actions to comply with Federal regulations and County policies * Develop strategies and plans to enforce security requirements and address identified risks * Provides guidance on business continuity and disaster recovery design * Monitor compliance with security policies, standards, guidelines and procedures * Monitor the legal and regulatory environment * Conduct security audits, A valid California Driver License, Class C or higher, may be required at the time of appointment. Failure to obtain or maintain the appropriate California Driver License, or comply with state and federal requirements for utilization, may constitute cause for personnel action in accordance with Civil Service Rules or applicable bargaining agreement. Individuals who do not meet this requirement due to disability will be reviewed on a case-by-case basis. Physical Requirements : Some positions in this class require the incumbents to be able to: * Distinguish between different colors. * Lift equipment that weighs up to 50 pounds. Individuals who do not meet these requirements due to disability will be reviewed on a case-by-case basis., * Employment applications and all documentation requested in this announcement must be submitted by 5:00 p.m. on the cut-off date. * Employment Services is not responsible for any issues or delays caused by an applicant's computer or web browser. Applicants will be automatically logged out if they have not submitted their applications and all documentation prior to 5:00 p.m. on the cut-off date. * Your application should highlight all relevant education, training, and experience, and clearly indicate how you meet the minimum qualifications for the position as of the cut-off date. * Application information must be current, concise and related to the requirements in this job announcement. You may only apply for this recruitment once. Duplicate and incomplete applications will be disqualified. * A resume may be included with your application, however it will not substitute for the information requested on the application. SUPPLEMENTAL QUESTIONNAIRE Applicants are required to provide a full and complete response to each supplemental question. The Supplemental Questionnaire is located in the tab marked "Supplemental Questions". Please be descriptive in your response. Note: Responses of "See Resume" or "See Application", or copy and paste of work experience are not qualifying responses and will not be considered. * Supplemental Questionnaires must be submitted by 5:00 p.m. on the cut-off date. Employment Services is not responsible for any issues or delays caused by an applicant's computer or web browser. Applicants will be automatically logged out if they have not submitted their applications and all documentation prior to 5:00 p.m. on the cut-off date. * The supplemental questions are designed to elicit specific information regarding a candidate's experience, education, and training. Responses should be consistent with the information on your application and are subject to verification. * Please provide place of employment, pertinent dates, and concise, descriptive and detailed information for each question. * If a job included responsibilities applicable to several questions, separate the different functions of the job to answer all the questions completely. * Resumes or referral to the application or other questionnaire responses will not be accepted in lieu of completing each question. * If you have no experience, write "no experience" for the appropriate question. * For many individuals, it is more efficient to develop responses to the supplemental questions in a word processing document and then paste them into the final document to be submitted. Changes or corrections to your Supplemental Questionnaire cannot be made once your application packet has been submitted. * If the Supplemental Questionnaire is used in the Formula Rate exam, failure to complete all of the questions or incomplete responses will result in a lower score. While scoring the Supplemental Questionnaire, the candidate's application and/or attachments will not be reviewed , therefore, a candidate's responses to the questions should be accurate, thorough, detailed, and complete. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) ## Related Articles - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)