Information Security Officer

Job Description and Duties

Under the direction of the California State Lottery’s (Lottery) Information Security & Privacy Manager, the Information Technology Specialist I (ITS I) will assist the Information Security and Privacy Office (ISO) in its mission of ensuring the confidentiality, integrity, and availability of Lottery Information Assets. The duties for this position are focused on the Information Security Engineering domain; however, work may be assigned in other domains as needed.

This position requires a current Information Technology Specialist I exam. If you need to take the exam or if your score has expired, click to gain list eligibility.
This position is headquartered in Sacramento and is eligible for a hybrid telework schedule. Employees must be able to report to their assigned headquarters office as assigned. Travel expense to and from the assigned headquarters are the responsibility of the employee. Eligibility for telework requires the employee to reside in California per California Government Code Section 14200 which states: “telecommuting means the partial or total substitution of computers or telecommunication technologies, or both, for the commute to work by employees residing in California.

When choosing a state organization to work for, there are a lot of options. Why choose the California State Lottery?

People are drawn to the Lottery because we:

• Are an energetic, creative, and talented team
• Value diversity and inclusion in the workplace
• Empower team members to bring their knowledge, expertise, and innovation
• Recognize individual and team contributions
• Support the importance of work-life balance
• Invest in the professional development of our team members
• Are dedicated to preserving our environment by lowering our carbon footprint

All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to clearly demonstrate how you meet the Minimum Qualifications for the position on your State Application (STD Form 678). The application should also clearly demonstrate the candidate’s ability to meet the Desirable Qualifications identified in this job advertisement. The Classification Specification is located on this Job Announcement Posting under "Minimum Requirements." 

It is highly recommended that you apply online using your CalCareers account. It is not necessary to return the contact letter if you applied electronically. Please ensure to monitor your email and/or CalCareers account for communication associated with your application submission.

Effective July 1, 2025, specific Bargaining Units and associated Excluded State employees are subject to a salary reduction between 2% - 4.62% in exchange for hours for Personal Leave hours each month. For more details, please click to visit the California Department of Human Resources (CalHR) website.

The Lottery is less than 30 minutes from all that Downtown Sacramento has to offer. Amenities include an onsite restaurant, free gym, close to the light rail station, electric car charging stations, and free parking!! Apply today to join a dynamic organization that is not only passionate about its mission, but also its people!!

You will find additional information about the job in the .

Working Conditions

1. Schedule: 8:00AM to 5:00PM PST (After hours may be needed to ensure the Information Security and Data Privacy duties for the California State Lottery)
2. Minimal: On demand travel may be required to facilitate / participate in information security and privacy related audits.
3. Other: The incumbent must maintain an expert level understanding of best practices related to Information Security and Privacy. The incumbent will work in a fast-paced environment with competing priorities, and mission critical deliverables.

Special Requirements

• The California State Lottery Act provides that no person may be hired as an employee of the Commission if that person has been convicted of a felony or any gambling related offense.
• The position requires a Background Investigation be cleared prior to being hired.
• If you are basing your eligibility on education, (), provide your transcripts and/or diploma. Applicants with foreign transcripts must provide a transcript evaluation that indicates the number of units to which the foreign course work is equivalent. Transcripts and evaluations may be unofficial ; official transcripts will be required upon appointment . Please redact birthdates and social security numbers.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Expert level understanding of ISO 27001 and NIST 800-53 standards.
• Experience in developing and implementing information security awareness training advisories, notices, and campaigns.
• Experience in information security incident handling and response.
• Expertise in conducting risk assessments to identify security and privacy risks, and in performing comprehensive gap analyzes.
• Experience conducting contract reviews from an information security and privacy perspective.
• Expertise in the development, management, and maintenance of information security and privacy policy, process, and procedure documentation.
• Experience in process improvement, strategic planning, information security governance, and risk management practices.
• Knowledge of governance of generative artificial intelligence.
• Excellent interpersonal and customer service skills with the ability to adjust to changing priorities and quickly respond to urgent matters while keeping an Enterprise perspective and demonstrating initiative, ownership, accountability, and independence.
• Excellent written and verbal communication skills and conducting presentations before audiences of all levels and size.

Benefits

Benefit information can be found on the CalHR website and the CalPERS website.

Statement of Qualifications

The SOQ is limited to two pages total, Arial 12-point font, single spaced, standard margins. Resumes and cover letters do not take the place of the SOQ, with a non-submission leading to disqualification. The SOQ is a narrative discussion of how your education, training, experience, knowledge, skills, and abilities meet the minimum qualifications for this position. The following qualifications are critical factors in job success for the Information Security Officer position. The SOQ must be numbered and include each below SOQ prompt typed in bold font. Respond to each SOQ item in the same order they are listed and provide specific examples.

By submitting this SOQ, you are certifying that you have read and understood the above instructions and that all information provided in the SOQ is true to the best of your knowledge.

1. Describe your information security and privacy education and experience, providing a recent example where your skillset was utilized. 

2. Describe your experience in information security incident handling, conducting contract reviews, and developing information security awareness training. 

3. Describe your experience, using an example, where you conducted a risk assessment or gap analysis to identify security and privacy risks. Please provide any emphasis on specific security frameworks and the outcome of the assessment.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications - Please see below for Statement of Qualification instructions.