Information Security Specialist

About the Organization

The California High-Speed Rail Authority is a small and dynamic state agency offering a fast-paced and fluid environment, distinct from typical state government jobs. This is an opportunity to be part of one of the most remarkable transportation projects in California's history.

About the Role

Under the general direction of the Security Operations Manager, the IT Specialist II (Information Security Specialist) serves as a lead for the Enterprise Governance, Risk, and Compliance (GRC) section. The incumbent works independently and collaboratively to plan, implement, maintain, and oversee the Authority's enterprise-wide GRC activities, with a strong focus on identifying, assessing, and managing information security risks. As a technical specialist within the Authority's Information Security Program, the incumbent provides leadership in the development, documentation, and maintenance of information security policies, standards, and procedures; ensures effective configuration management practices; and coordinates enterprise reporting on governance, risk posture, privacy, and compliance performance. The incumbent leads efforts to establish and maintain a consistent, repeatable risk management framework; ensures alignment with statewide and federal requirements; and drives integration of risk-based decision-making across IT and business units. Through expert-level guidance and oversight of risk identification, evaluation, mitigation, and monitoring activities, the incumbent strengthens the Authority's security governance and elevates organizational risk awareness and accountability. These efforts enhance the Authority's ability to manage enterprise security risk effectively and support the protection of critical assets in alignment with mission objectives.

Part-time telework is available for this position for California residents based on the requirements of the position and may be discussed during the interview process. Hiring interviews may be available virtually, using teleconferencing or video conferencing options.

Desirable Skills

• Hands-on experience with AWS platforms, SaaS integration, and enterprise application architecture
• Hands-on experience with Programming languages such as .Net, Python, etc.
• Hands-on experience with SaaS applications such as ServiceNow, Salesforce, etc.
• Experience with complex integrations, Application Programming Interfaces (API)
• Experience with generative AI tools and frameworks (e.g., OpenAI, Copilot Studio, Azure AI, etc.)
• Demonstrate a working knowledge of project management practices, the system development lifecycle, etc.
• Demonstrate a service-oriented and customer relations-sensitive attitude
• Ability to meet business needs through innovative solutions and demonstrate a service-oriented, customer relations-sensitive attitude
• Ability to establish and maintain cooperative working relationships with all levels of staff and management; communicate effectively with peers, other technical teams, executives, external partners, vendors, and others
• Ability to manage multiple high priority initiatives in a fast-paced, achievement-oriented environment and work under pressure to meet deadlines
• Ability to maintain confidentiality of sensitive tasks, assignments, and information
• Ability to prepare and produce clear and concise documentation (e.g., processes and procedures, plans, technical diagrams, information security policies, etc.)
• Willingness to work excess hours to achieve business results
• Display enthusiasm for continuous learning

Minimum Qualifications

To learn more about the minimum qualifications, please click here.