Information Technology Specialist I - Information Security Officer

Job Description and Duties

The duties for this position are focused on the Information Security Engineering domain; however, work may be assigned in other domains as needed. This position requires a current Information Technology Specialist I exam. If you need to take the exam or if your score has expired, click here to gain list eligibility.

This position is headquartered at the Sacramento HQ and is eligible for a hybrid telework schedule. Employees must be able to report to their assigned headquarters office as assigned. Travel expense to and from the assigned headquarters are the responsibility of the employee.

Qualifications

• Expert level understanding of ISO 27001 and NIST 800-53 standards.
• Experience in developing and implementing information security awareness training advisories, notices, and campaigns.
• Experience in information security incident handling and response.
• Expertise in conducting risk assessments to identify security and privacy risks, and in performing comprehensive gap analyzes.
• Experience conducting contract reviews from an information security and privacy perspective.
• Expertise in the development, management, and maintenance of information security and privacy policy, process, and procedure documentation.
• Experience in process improvement, strategic planning, information security governance, and risk management practices.
• Knowledge of governance of generative artificial intelligence.
• Excellent interpersonal and customer service skills with the ability to adjust to changing priorities and quickly respond to urgent matters while keeping an Enterprise perspective and demonstrating initiative, ownership, accountability, and independence.
• Excellent written and verbal communication skills and conducting presentations before audiences of all levels and size.

Working Conditions

• Schedule: 8:00AM to 5:00PM PST (After hours may be needed to ensure the Information Security and Data Privacy duties for the California State Lottery)
• Minimal: On demand travel may be required to facilitate / participate in information security and privacy related audits.