Information Security Specialist

Information Technology Manager I

Under the general direction of the Security Operations Manager, an Information Technology (IT) Manager I of the California High-Speed Rail Authority (Authority), the IT Specialist II (Information Security Specialist) serves as a lead for the Enterprise Governance, Risk, and Compliance (GRC) section. The incumbent works independently and collaboratively to plan, implement, maintain, and oversee the Authority's enterprise-wide GRC activities, with a strong focus on identifying, assessing, and managing information security risks. As a technical specialist within the Authority's Information Security Program, the incumbent provides leadership in the development, documentation, and maintenance of information security policies, standards, and procedures; ensures effective configuration management practices; and coordinates enterprise reporting on governance, risk posture, privacy, and compliance performance. The incumbent leads efforts to establish and maintain a consistent, repeatable risk management framework; ensures alignment with statewide and federal requirements; and drives integration of risk-based decision-making across IT and business units. Through expert-level guidance and oversight of risk identification, evaluation, mitigation, and monitoring activities, the incumbent strengthens the Authority's security governance and elevates organizational risk awareness and accountability. These efforts enhance the Authority's ability to manage enterprise security risk effectively and support the protection of critical assets in alignment with mission objectives.

You will find additional information about the job in the Duty Statement.