INFORMATION TECHNOLOGY SPECIALIST I

State of California • Sacramento, CA

40d • Hybrid

About The Position

Under the general direction of the Deputy Chief Information Security Officer (DCISO), an Information Technology Supervisor II in the Information Security Office (ISO), the incumbent performs State Controller's Offices (SCO) Information Security Program activities, such as security risk management to ensure SCO business and technical environments have and maintain an appropriate security posture. Additionally, as an Information Security Program Specialist I, the incumbent will provide physical & environmental security, cybersecurity program support, partner integration planning, integrated security incident response team (ISIRT), and miscellaneous division support. The incumbent will be responsible for developing and maintaining physical and environmental security policies and procedures aligned with NIST standards and guidelines, performing system administration duties, and handling client calls, issues, and questions. The incumbent will also assist interagency partners in endorsing or not endorsing policies, respond to assigned security incidents, and assist with division technical duties to support organizational needs. Duties include but are not limited to the following: You will find additional information about the job in the Duty Statement.

Requirements

• A resume is required.
• A Statement of Qualifications is required; please see 'Required Application Package Documents' for instructions.
• Take the required examination here: Information Technology Specialist I Examination
• Applicants must meet the Minimum Qualifications stated in the Classification Specification(s).

Nice To Haves

• Education: A bachelor's degree in computer science, information technology, cybersecurity, or a related field.
• Certifications: One or more industry-standard certifications, such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Information Security Manager (CISM).
• Experience: 2+ years of experience in cybersecurity or a related field. This experience can be gained through previous employment in an IT or cybersecurity role or through internships and other relevant work experience.
• Technical skills: Strong understanding of computer systems, networks, and security protocols. Be well-versed in a variety of cybersecurity tools and technologies, such as firewalls, intrusion detection systems, and vulnerability scanners.
• Soft skills: Possess strong communication, problem-solving, and critical thinking skills. Be able to work well under pressure, collaborate effectively with others, and stay up-to-date with the latest cybersecurity trends and threats.

Responsibilities

• Responsible for developing and maintaining physical and environmental security policies and procedures aligned with NIST standards and guidelines, conducting risk assessments, implementing security controls, coordinating with other departments, providing training, monitoring security systems, investigating and reporting on incidents, working with external vendors and contractors, and staying up-to-date with industry trends and best practices.
• Act in a supportive role for various cybersecurity areas, including cybersecurity management, awareness, physical security, policy and projects, governance and compliance, and security operation control. Perform system administration duties and handle client calls, issues, and questions via phone, email, or support tickets. Perform detailed analysis of issues received from clients. Building and maintaining a high-level of client satisfaction and valuable relationships with clients. Responsible for administrative tasks to support cybersecurity management.
• Assist and advise interagency partners in endorsing or not endorsing such policies, providing subject matter expertise to planning teams, coordination groups, and task forces as necessary. They will also conduct long-range, strategic planning efforts with both internal and external partners in cyber activities. Prepare for and provide subject matter expertise to exercises, offering planning support between internal and external partners. Serve as a conduit of information from partner teams by identifying subject matter experts who can assist in the investigation of complex or unusual situations.
• Responsible for responding to assigned security incidents, including classifying incidents, conducting assessments, selecting additional support members, maintaining confidentiality, assisting with recovery efforts, documenting incidents with root cause analysis and lessons learned, reporting incidents to the CISO and the Executive Office, maintaining awareness of effective response procedures, and staying current on cybersecurity threats and best practices.
• Assist with division technical duties in various program areas to support organizational needs using a variety of skills and software.

Benefits

• The building offers affordable monthly parking, employee gym access, an amenities center, and a beautiful mid-tower garden terrace.
• This position is eligible for hybrid telework under California Government Code Section 14200 for eligible applicants residing in California.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Executive, Legislative, and Other General Government Support
• Number of Employees: 1,001-5,000 employees