Agency Information Security Officer

Job Description and Duties

Why Join California Health and Human Services Agency Office of Technology and Solutions Integration (CalHHS OTSI or OTSI)?

At OTSI, your work directly improves the health and well-being of Californians. We exist to be the trusted partner to CalHHS and its 12 state departments to deliver high-impact IT and data solutions that strengthen health and human services programs statewide.

We bring leadership, expertise, and capacity together and work collaboratively with our partners to design, deliver, and support IT and data solutions that accelerate the delivery of health and human service program outcomes and service value. Our culture is grounded in accountability, respect, integrity, and collaboration, and we integrate those values in how we lead, how we work, and how we serve.

If you are interested in applying your knowledge, skills, and experience in supporting critical public services, influencing statewide health and human service outcomes, and working alongside leaders and professionals who take ownership of results – OTSI is where that happens!

About this role:

The AISO (IT Manager II) leads the planning and development of the Agency’s Information Security Strategy and related policies/standards, and drives corresponding tactical activities aimed at increasing the information security maturity level of CalHHS entities information assets, working closely with all CalHHS entities, the California Department of Technology (CDT) Office of Information security (OSI), and the California Office of Emergency Services (Cal OES), Cyber Security Integration Center (Cal-CSIC) to understand needs and priorities.

The AISO supports department information security efforts and assesses compliance with key Agency information security initiatives through oversight and support, working closely with entity Information Security Officers (ISOs) and solution architects. The incumbent acts as an expert and consultant to the CalHHS entities on the implementation of internal and external policies and standards, laws, trends, and best practices regarding information security.

The AISO is the CalHHS liaison to the CDT/OIS & CDT IT Policy functions, representing the needs of CalHHS and its entities and communicating CDT policy, guidelines, and requirements to the CalHHS entities ISOs.

You will find additional information about the job in the .

Working Conditions

PLP:

On July 1, 2025, the California Department of Human Resources (CalHR) implemented the temporary Personal Leave Program 2025 (PLP 2025). PLP 2025 directs that each employee receives a temporary reduction in pay in exchange for PLP 2025 leave credits. The temporary salary reduction percentage and the number of PLP 2025 leave credits are based on the position’s associated bargaining unit. The salary range(s) included in this job advertisement do not include the temporary salary reduction. Please reach out to the hiring unit contact listed on this job advertisement for details.

Telework:

This position is currently eligible for one telework day per-week and is required to report in-person a minimum of four days per week. The amount of telework is at the discretion of the OTSI and is subject to operational needs.

Reporting Location:

Business travel may be required. All commute expenses to the reporting location will be the responsibility of the selected candidate.

The OTSI office location for this position is: 2870 Gateway Oaks Drive Sacramento, CA 95833

Travel reimbursement considerations take into account an employee’s home address and designated reporting location and are subject to applicable policies, rules, regulations, and bargaining unit contract provisions.

Special Requirements

Possession of minimum qualifications will be verified prior to the interview and/or appointment. If you are meeting minimum qualifications with education, you must include your unofficial transcripts/diploma for verification. Sealed Official transcripts are required upon appointment. If it is determined a candidate does not meet the Minimum Qualifications, the candidate will be withheld from the eligibility list, rendering them inactive and ineligible to be hired for the position.

Simple Application Steps:

If you are interested in this position, complete the following simple steps:

1. Review the education and experience minimum qualifications (MQ’s) of the Information Technology Manager II Classification See the Minimum Requirements section above.
2. Complete the statement of qualifications and the state application by clicking “Apply Now” above. See below for detailed application instructions.
3. Submit your application package with all required documents, which include the statement of qualifications - see the "Required Application Package Documents" section below.
4. Once you have applied, take the 

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Experience as an Information Security Officer or a Chief Information Officer with specific cyber-Security and Privacy-related responsibilities, including incident response, development/monitoring of compliance, development/implementation of a Plan of Action and Milestone (POAM) associated with security compliance maturity.

• Demonstrated experience overseeing the application and/or implementation of information security and data privacy technologies.

• Knowledge of information security and data privacy industry best practices.

• Demonstrated experience preparing and leading the execution of enterprise security strategies and/or tactical road maps.

• Demonstrated experience assessing planned enterprise and solution/service architectures to determine alignment with enterprise security strategies, standards and policies.

• Demonstrated ability to collaborate, coordinate, and communicate effectively across all levels of an organization and with external partners and stakeholders including those with regulatory control functions.

• Experience developing, implementing, and acting as an advocate for information security best practices and security awareness.

• Demonstrated use of and application of cybersecurity, risk management and control frameworks (such as National Institute of Standards and Technology (NIST) Cybersecurity Framework, NIST Risk Management Framework, and NIST 800-53 controls); working knowledge of regulatory requirements including Health Insurance Portability and Accountability Act (HIPAA) and familiarity with MARS-E requirements and the California Information Practices Act.

• Demonstrated experience developing and/or providing information security training.

Benefits

OTSI is dedicated to creating an innovative workplace for its team members that is inclusive, diverse, and interactive! Here are a few of the ways we stay engaged with our team:

• Ongoing professional development and engagement opportunities.
• Employee Assistance Program (EAP).
• Free Parking!

Additionally, as a team member of the State of California, you may be eligible for many benefits, such as:

• Medical, including health, dental, and vision insurance.
• Paid Holidays and vacation/leave
• Defined retirement program
• Savings Plus Program (401(k), 457)
• Medical/Dependent Care Reimbursement Accounts

Full benefits information can be found on CalHR's 

Statement of Qualifications

When responding to the Statement of Qualifications, applicants must follow these below instructions. Failure to follow these instructions may result in disqualification from this exam/hiring process.:

• Responses must be typewritten on 8 1/2" x 11" paper, no more than 2 page(s) in length, and using font no smaller than size 11.
• Responses are to be complete, specific, clear, and concise.
• Responses to the questions should be easily identified (e.g. by numbering the response to the corresponding question, or repeating the prompt in response).

1. After reviewing the duty statement and desirable qualifications, please describe your knowledge, skills, and experience, and explain why they make you the best fit for this role.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications -

  A Statement of Qualifications is required. Please see the Statement of Qualifications Instructions below.