Job Description

Job Description and Duties

Under the general direction of the Chief Information Officer (CIO), the incumbent is designated as Finance’s Information Security Officer (ISO). The ISO provides input and participates in the planning, developing, and managing efforts of Information Security incident responsibilities; develops and implements policies and operational standards addressing information security; provides advice and technical assistance to management on information security-related issues; co-leads projects to determine the potential risk of exposure of all information assets; serves as a consultant on implementation of laws, policies and standards regarding current information security; serves as the liaison to all control agencies in communicating the Department’s security policies, incident responses and action plans; and ensures all Government Code and State Administrative Manual requirements are met.

The ISO investigates, resolves, and reports through appropriate channels all information security incidents; monitors vulnerabilities, threats and incidents; performs departmental risk assessments; conducts and documents information security awareness training for all employees on an annual basis.

You will find additional information about the job in the .

Special Requirements

Finance operates under a hybrid telework model, which requires employees to work in the office (report to headquarters) for a minimum of two days during the workweek. The hybrid policy is subject to change, and additional in-office days may be required at management's discretion.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Knowledge of policies relating to information security and privacy in the State of California.
• Knowledge of KnowB4 Phishing Scam and Training Tool and KnowBe4 PhishER.
• Experience in a combination of risk management, information security and Information Technology positions.
• Excellent analytical and problem-solving skills.
• Effective communication skills, both verbal and written.
• Ability to develop and maintain effective and cooperative working relationships.
• Ability to change priorities, work under pressure and meet critical deadlines.
• Ability to exercise a high degree of initiative, independence of action, tact and good judgment.
• Ability to make and provide sound recommendations and decisions.
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)

Benefits

For general information related to benefits with the State of California, please click here:  California State Civil Service Employee Benefits Summary .

Finance employees are excluded from collective bargaining and are eligible to receive the following enhanced benefits:   

• Enhanced medical, dental, and disability benefits
• Employer paid Life Insurance
• Additional hour of Vacation/Annual Leave
• Excluded employees are not subject to State Disability Insurance payroll withholding

For more details about employee benefits, visit the Department of Fin ance’s website  . 

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Supplemental Application -

  A supplemental application of no more than two typewritten pages, using 12-point font. Please provide examples in responding to the following statements:

  1. Describe your experience working with executive staff, management, and a team-oriented environment.
  2. Describe your experience developing, interpreting, and implementing security policies.
  3. Describe your knowledge and experience of addressing cybersecurity challenges and security risk tolerance.
  4. Describe your experience with analyzing budget change proposals that have security related components and the recommendations provided.

Job Tags

Similar Jobs