> Markdown version of [/jobs/ext/841172-information-security-specialist](https://www.wearedevelopers.com/jobs/ext/841172-information-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Specialist

- **Company:** Infowave Systems Inc
- **Location:** Sacramento, CA, United States
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Technology
- **Published:** June 30, 2026
- **Apply:** https://www.dice.com/job-detail/9b97f0ab-9ee5-4b48-abf4-f5c77a301b3e

## About the Role

* Bachelor''s degree in Information Technology, Engineering, or a related field, or equivalent experience.
 * Hands on experience in information security, risk management, privacy, insider threat, or related areas.

Preferred Experience:

 * Experience building or managing Enterprise Risk Management programs.
 * Experience developing and operating Insider Threat programs.
 * Experience defining risk metrics, reporting structures, and risk appetite frameworks.
 * Experience managing risk registers or enterprise risk tracking tools.
 * Experience performing structured risk assessments using established methods.
 * Experience supporting audits and compliance-related documentation.
 * Experience working with sensitive data protection and risk mitigation.
 * Experience delivering training, workshops, or knowledge-sharing sessions.

## Description

* Develop and maintain Enterprise Risk Management (ERM) programs, including frameworks, governance structures, and alignment with organizational goals.
 * Design and manage Insider Threat programs, including policies, monitoring approaches, and risk assessment processes.
 * Define and track risk metrics, Key Risk Indicators (KRIs), and risk reporting to support leadership decision-making.
 * Maintain enterprise risk registers and risk tracking systems to identify, assess, and monitor organizational risks.
 * Perform qualitative and quantitative risk assessments using structured methodologies.
 * Identify and manage risks related to sensitive and regulated information, including personal and confidential data.
 * Support audit readiness activities by maintaining clear and accurate security documentation and evidence.
 * Contribute to privacy, supply chain risk, and security policy development and implementation.
 * Deliver training sessions and workshops to improve awareness and understanding of security and risk practices.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green)

## Related Articles

- [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)