Information Security Officer - Principal Manager I (JO# 6712)

The Information Technology office is seeking a Principal Manager I to serve as the Information Security Officer (ISO) for the Judicial Council and the broader Judicial Branch. This senior-level role reports directly to the Chief Information Officer and leads the Judicial Council’s Information Security Services Program, protecting branchwide information systems, strengthening cybersecurity practices, and advising Judicial Council leadership, committees, and California courts on security matters.

About the Organization

The Judicial Council of California is the policy-setting body for the state court system and has constitutionally conferred statewide rule-making authority. This authority includes developing, advocating for, and allocating the judicial branch budget. A majority of Council members are California state justices and judges; however, the Council also includes lawyers, legislators, and court administrators.

As a government body charged with improving the statewide administration of justice, the Judicial Council has multiple offices with diverse responsibilities relating to court policy and operations. The Council strives for work-life balance and offers hybrid work arrangements for many positions. The successful candidate will be expected to reside within the State of California and travel to office and court locations throughout the state as business needs dictate.

Responsibilities

• Provides security leadership and acts as a security subject matter expert advising the Judicial Council, the judicial branch, and judicial branch committees.
• Oversight of security governance, privacy, compliance, and risk management.
• Oversight of the development and delivery of the information security office’s programs and services, including:
  • Incident response program
  • Disaster recovery, business continuity, and cybersecurity resiliency
  • Security risk assessments and vulnerability management
• Oversees the development of security policies and promotes security awareness and accountability.
• Supervises the information security program staff and manages the information security office budget and financial portfolio.
• Oversees the procurement of security products and services.
• Ensures secure and cohesive operations across on-premises and cloud environments, providing leadership on cloud governance, architecture, and risk mitigation.
• Represents the Judicial Council in executive discussions, committees, and public forums as the cybersecurity advisor and subject matter expert.
• Attends weekly management staff meetings, annual technology roadmap sessions, semi-annual Judicial Council all-staff meetings, and quarterly status meetings with key vendors and state partners.

Requirements

Minimum Qualifications:

• Bachelor’s degree and six (6) years of professional analytical or managerial experience in assigned function, including at least three (3) years of supervisory/management experience. An additional four (4) years of professional experience may substitute for the bachelor’s degree.
• OR Master’s degree in a directly related field and three (3) years of professional-level analytical or managerial experience, including at least three (3) years of supervisory/management experience.

Desirable Qualifications:

• Educational: Degree in information technology, Computer Science, Cybersecurity, or a related field.
• Experience:
  • 5-10 years of progressive responsibility in IT and Information Security roles
  • Proven leadership in developing and implementing security policies, frameworks, and incident response plans
  • Cybersecurity framework experience (NIST SP 800-53, CJIS compliance, ISO 27001)
  • Knowledge of regulatory requirements and frameworks (e.g., GDPR, HIPAA, PCI-DSS, SOC 2)
  • Experience with security technologies such as SIEM, IDS/IPS, endpoint protection, firewalls, and DLP systems
  • Proficiency in security protocols (SSL/TLS, IPsec), authentication mechanisms, and encryption techniques
  • Experience with Zero Trust Architecture and AI Risk Governance
  • Cloud security governance across cloud platforms (i.e., Azure, AWS, GCP)
• Certifications: CISSP, CISM, CASP+, CISA
• Soft Skills:
  • Leadership and team management
  • Communication skills to convey complex technical concepts to non-technical stakeholders
  • Strategic thinking to align security initiatives with organizational goals
  • Analytical skills to assess threats, vulnerabilities, and risks
  • Problem-solving to respond to security incidents effectively
  • Collaboration and partnership with internal/external partners

Benefits

• Health, dental, and vision benefits program
• 14 paid holidays per calendar year
• Choice of Annual Leave or Sick/Vacation Leave
• 1 personal holiday per year
• Up to $130 per month reimbursement for qualifying commuting costs
• CalPERS Retirement Plan
• 401(k) and 457 deferred compensation plans
• Employee Assistance Program
• Basic Life and AD&D Insurance
• FlexElect Program
• Pretax Parking
• Long Term Disability Program (employee-paid/optional)
• Group Legal Plan (employee-paid/optional)
• Public Service Loan Forgiveness (PSLF) eligibility
• Additional 5 hours of paid personal leave per month through June 30, 2027, in exchange for a temporary 3% salary reduction

Pay

$10,475 - $15,713 per month (subject to a temporary 3% reduction through June 30, 2027).