Information Security Lead

Information Security Lead

Sacramento, CA

Mandatory Qualifications:

Minimum of seven years of experience aligning IT systems with organizational business processes.

At least four years of that experience must have been in a lead capacity.

Education which requires the possession of a bachelor’s degree in an IT-related or Engineering field. Additional qualifying experience may be substituted for the required education on a year-for-year basis.

Possession of current Information Security certifications in at least one (1) of the following:

o Certified Information Systems Security Professional (CISSP)

o Certified Information Security Manager (CISM)

o Certified Cloud Security Professional (CCSP)

o Any SANS Global Information Assurance Certification (GIAC)

Minimum of six (6) years of combined experience working with any of the following information security publications and standards:

o National Institute of Standards and Technology (NIST) and Federal Information Processing Standards (FIPS)

o California State Administrative Manual (SAM)/California Statewide Information Management Manual (SIMM)

Minimum of six (6) years of experience with Information Security Policy development and/or maintenance.

Minimum of four (4) years of combined experience implementing and/or maintaining any of the following Information Security Program components:

o Threat and Vulnerability Management

o Security Roadmap Planning/Development

o Information Security Awareness and Training

o Security Control Compliance Assessment

o Plan of Actions & Milestones Development

Minimum of three (3) years of experience performing HIPAA compliance and/or gap assessments.

Minimum of two (2) years of experience developing Security Incident Response Team processes.

Minimum of three (3) years of experience in at least one (1) of the following:

o Crowdstrike

o Palo Alto Networks

o ZScaler

Minimum of four (4) years of experience TVM software configuration and troubleshooting.

Minimum of seven (7) years of experience aligning IT systems with organizational business processes. At least four (4) years of that experience must have been in a lead capacity.

Possession of a bachelor’s degree in an IT-related or Engineering field. Additional qualifying experience may be substituted for the required education on a year-for-year basis. (please provide copy of education)

Certification:

Possession of current Information Security certifications in at least two (2) of the following:

o Certified Information Systems Security Professional (CISSP)

o Certified Information Security Manager (CISM)

o Certified Cloud Security Professional (CCSP)

o Any SANS Global Information Assurance Certification (GIAC)

Must submit a copy of the certification.