Privacy Officer

Information Technology Manager I

The reporting location for this position will be the Sacramento Headquarters. Reporting location is determined based on the location of the top candidate. This position works under the administrative direction of the Information Technology Manager II.

The Privacy Officer will ensure fulfillment of compliance and privacy programs. This includes but is not limited to Information Security and Privacy Program Policy Compliance, PayCard Industry Compliance Strategy and oversight activities, Privacy & Disclosure Review Activities in partnership with the eDiscovery & Incident Response Group Lead, managing the Technology Recovery Coordinator and Policy & Privacy Specialists, Contractors and Students in the Information Security & Privacy Office, Headquarters, and all of the Department's 288 field locations. Duties include management, supervision, and regulatory compliance for PII protected data, PayCard industry partners, vendor data privacy reviews, training staff, and monitoring adherence to federal information processing standards, national institute of standards and technology special publications, as well as ensuring integration of privacy elements and interleaving the enterprise data classification program into preventative mitigations for the enterprise environment. This position acts as the Compliance Manager, participating in and working to ensure staff further elevate program maturity in the ISPO and its formal documentation to solidify foundations on which confidentiality, integrity, and availability of data reduces outages and threats along a multitude of critical DPR enterprise technology services spanning network and server infrastructure to industrial control systems, field law enforcement and scientific technologies. This position orchestrates public records data collection and conducts disclosure review in legal matters and for electronic discovery for release external to the Department. Privacy disclosure expertise and California Consumer Privacy Act (CCPA & CPRA) and DROP Act compliance knowledge is critical. In addition, this position will manage staff and contractors that must in-turn enact data privacy standards, run the data classification program, and shall conduct business and privacy impact assessments on critical systems and infrastructure with staff. This position delivers the register of risk, plan of actions and milestones quarterly to the CISO after review with subordinate policy & privacy specialist staff. Travel will be required for this position.

Training and Development Assignments may be considered.

This position is designated as telework eligible-office centered.

State housing is not available. For further information regarding this position, please contact Jeremiah Harvey at View phone number on click.appcast.io or at View email address on click.appcast.io.

This recruitment may be used to fill identical vacancies which may occur within 180 days of the Final Filing Date of this job posting.

You will find additional information about the job in the Duty Statement.