information security officer

Altitude-Recruitment Limited

<strong>Permanent</strong><strong>Based in Milton Keynes</strong><strong>£50,000 pa - £60,000 pa</strong><strong>Information Security Officer </strong><strong>Hybrid</strong> Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential.With over 25 years of experience and trusted by more than 350 institutions worldwide, their software empowers universities and venues to run smarter, faster, and more collaboratively. From bustling campuses to dynamic corporate environments, their technology adapts to the rhythm of each organisation - helping them thrive in a fast-changing world.They are more than just software. They are a team of passionate problem-solvers, innovators, and collaborators who care deeply about their customers and each other. Their culture is built on empowerment, community, and continuous growth. They believe in giving people the tools, support, and freedom to do their best work - and have fun while doing it.Joining our client means being part of a purpose-driven business where your ideas matter, your development is supported, and your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you. An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. <strong>Core Responsibilities:</strong><strong>Strategic (30%)</strong> <ul> <li>Define technical security architecture and standards across multi-cloud SaaS platforms </li><li>Embed security into product development lifecycle and roadmap planning </li><li>Conduct threat modelling and risk assessments for new features and system changes </li><li>Evaluate and recommend security technologies and tools </li></ul> <strong>Operational (40%)</strong> <ul> <li>Manage security environments across Azure and AWS infrastructure </li><li>Coordinate security incident response and vulnerability remediation </li><li>Oversee security monitoring, alerting, and detection capabilities </li><li>Manage vulnerability assessment and penetration testing programs </li><li>Maintain identity and access management controls </li></ul> <strong>Compliance & Assurance (30%)</strong> <ul> <li>Maintain ISO27001 certification and manage audit cycles </li><li>Ensure PCI/DSS compliance for payment processing systems </li><li>Manage GDPR compliance across all products and operations </li><li>Complete HECVAT and security questionnaires for higher education tenders </li><li>Support sales and customer success with security documentation and evidence </li><li>Act as primary security contact for customers and prospects </li></ul> <strong>Essential Requirements:</strong><ul> <li>Substantial information security experience in SaaS/cloud software environment (ISV or B2B software preferred) </li><li>Proven track record managing ISO27001 certification and compliance </li><li>Practical GDPR implementation experience in software products </li><li>PCI/DSS compliance experience with payment processing systems </li><li>Strong understanding of cloud security (Azure and/or AWS) </li><li>Application security and secure development lifecycle knowledge </li><li>Security incident management and cross-functional response coordination </li><li>Excellent communication skills - able to translate technical security for commercial and executive audiences </li><li>Experience supporting tender responses and client security assurance </li></ul> <strong>Preferred:</strong><ul> <li>Professional certifications: CISSP, CISM, CISA, or equivalent </li><li>Higher education sector experience </li><li>Multi-tenant SaaS architecture security experience </li><li>DevSecOps and CI/CD security integration knowledge </li><li>Security frameworks: NIST, CIS Controls, OWASP </li><li>Multi-jurisdictional data protection knowledge </li><li>Enterprise sales cycle support experience </li></ul> <strong>Key Attributes:</strong><ul> <li>Strategic thinker who can balance security with business needs </li><li>Pragmatic approach to security implementation </li><li>Detail-oriented with strong organisational skills </li><li>Collaborative and able to influence across teams </li><li>Proactive in identifying risks and improvement opportunities </li><li>Comfortable in fast-paced, dynamic environment </li></ul> Our client have created a welcoming office environment, with well-stocked kitchens offering free breakfast, fresh fruit, hot and cold drinks, and a range of tuck shop goodies to keep you fuelled throughout the day. They are an equal opportunity employer, fostering diversity and committed to creating an inclusive environment for all employees. Please let us know if we need to make reasonable adjustments to our process, please let us know about how we can best support you and make the adjustments that may be needed. Altitude-Recruitment Limited acting as an Employment Agency and Employment Business.

Information Security Officer

Prime Care Qatar

<p><b>Position Overview:</b> The Chief Information Security Officer (CISO) is a senior executive responsible for establishing and maintaining the organization's vision, strategy, and program to ensure that information assets, technologies, and data are adequately protected. The CISO will lead efforts to identify, evaluate, and mitigate risks to the organization, implement robust security strategies, and oversee the continuous improvement of a secure enterprise environment. The CISO will also actively monitor and intervene whenever necessary to mitigate security problems that may arise, ensuring prompt and effective response to any security incidents.</p><p><b>Key Responsibilities:</b></p><p><b>Strategic Leadership:</b></p><ul><li>Develop, implement, and monitor a comprehensive enterprise information security and risk management program.</li><li>Align the security program with business objectives, ensuring compliance with industry regulations and standards.</li><li>Advocate for security awareness across the organization.</li></ul><p><b>Risk Management:</b></p><ul><li>Conduct regular risk assessments to identify potential threats and vulnerabilities.</li><li>Develop and maintain risk treatment plans to mitigate or eliminate risks to acceptable levels.</li><li>Oversee incident response planning and disaster recovery strategies.</li><li>Actively monitor the enterprise environment for security issues and intervene directly as needed to address emerging threats or incidents.</li></ul><p><b>Policy and Compliance:</b></p><ul><li>Establish and enforce security policies, procedures, and standards.</li><li>Ensure compliance with applicable laws, regulations, and industry frameworks (e.g., GDPR, ISO 27001, HIPAA, NIST).</li><li>Act as the primary point of contact for audits and security-related inquiries.</li></ul><p><b>Technology Oversight:</b></p><ul><li>Evaluate, acquire, and implement security solutions and technologies.</li><li>Ensure the secure design, architecture, and deployment of IT systems and applications.</li><li>Manage the organization's Security Operations Center (SOC), if applicable.</li></ul><p>In the absence of a dedicated security team, the CISO is expected to work hands-on to implement, manage, and monitor technical security controls, enforce access management policies, and directly respond to security incidents across systems and networks.</p><p><b>Collaboration and Communication:</b></p><ul><li>Work with stakeholders across departments to integrate security into business operations.</li><li>Provide regular reporting on security metrics, incidents, and progress to the executive team and board of directors.</li><li>Engage with external partners, vendors, and consultants for security solutions and best practices.</li></ul><p><b>Team Management:</b></p><ul><li>Build and lead a high-performing information security team.</li><li>Provide training, mentorship, and career development for security personnel.</li><li>Foster a culture of accountability and continuous improvement within the security team.</li></ul><p><b>Key Performance Indicators (KPIs):</b></p><ul><li>Reduction in security incidents and breaches.</li><li>Compliance with regulatory requirements and audits.</li><li>Implementation of security strategies within defined timelines.</li><li>Security awareness levels among employees.</li><li>Incident response and recovery times.</li></ul><p>Job Type: Full-time</p>

Chief Information Security Officer (CISO)

Raytheon

<div><p><b>Date Posted:</b></p>
2025-11-10<p><b>
Country:</b></p>
United States of America<p><b>
Location:</b></p>
CA220: 2202 E El Segundo Blvd BldgE02 2002 East El Segundo Boulevard Building E02, El Segundo, CA, 90245 USA<p><b>
Position Role Type:</b></p>
Onsite<p><b>
U.S. Citizen, U.S. Person, or Immigration Status Requirements:</b><b>
</b></p>Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
<p><b>Security Clearance:
</b></p>DoD Clearance: Secret<p></p><p>
RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses &ndash; Collins Aerospace Systems, Pratt &amp; Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.</p><p></p><p>
The following position is to join our RTX Corporate team:</p><p></p><p>
The ISSO assists the Information System Security Manager (ISSM) to provide oversight for the information systems security control methods, mitigations, and tools throughout a systems&rsquo; lifecycle in compliance with U.S. Department of Defense (DoD) security laws, regulations and guidelines. The ISSO will participate in projects, guide and counsel internal customers, assist in developing and maintaining program/dataset specific processes and standards, and provide training and guidance on tools and methods to other members of the cybersecurity team.</p><p></p><p><b>
What You Will Do</b></p><ul><li><p>
The ISSO is primarily responsible for system compliance, auditing and delivering information systems security education and awareness.</p></li><li><p>
The ISSO will assist in investigating information system security violations and help prepare reports specifying corrective and preventative actions.</p></li><li><p>
Perform security sustainment activities (hardware change management, software change management, account management, media protection, user interface, file transfers, etc.).</p></li><li><p>
Assists in overseeing and managing the patch management process and execution across enterprise networks. Verifying the implementation of delegated aspects of the system security program.</p></li><li><p>
Ensuring audit records are collected and analyzed in accordance with the security plan.</p></li><li><p>
Individuals will develop, update, and/or review Risk Management Framework (RMF) documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&amp;M), Risk Assessment Report (RAR), as assigned by the ISSM.</p></li><li><p>
Collaborates with CDS and peer BU ISSMs/ISSOs for alignment and sharing of best practices.</p></li></ul><p></p><p><b>
Qualifications You Must Have</b></p><ul><li><p>
Bachelor&rsquo;s Degree with 5 years of relevant experience managing and implementing security program requirements in a classified environment, or an advanced degree with 3 years of relevant experience working in a classified environment.</p></li><li><p>
Compliance-based auditing using the RMF, Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM), or National Industrial Security Program Operating Manual (NISPOM).</p></li><li><p>
Certifications equivalent to or exceeding DoD 8570.01-M IAM Level I functional and baseline certification requirements.</p></li><li><p>
Knowledge and/or experience with STIGs, SCAP, Splunk, Tenable or other system hardening and compliance, vulnerability assessment, network security and/or SIEM tools.</p></li><li><p>
Must posses a DoD Secret Security clearance</p></li></ul><p></p><p><b>
Qualifications We Prefer</b></p><ul><li><p>
Experience working in DoD classified operating environments and/or in the execution of the Assessment &amp; Authorization processes, as defined within the Risk Managed Framework (RMF), NIST 800-53- Rev 4</p></li><li><p>
Experience with Scaled Agile Framework (SAFe) work practices.</p></li><li><p>
Experience with large multi-facility networks including various and complex components.</p></li><li><p>
Excellent oral and written communication skills with attention to detail and ability to multitask.</p></li><li><p>
Ability to adapt to rapidly changing environment and work under pressure to meet project deadlines.</p></li></ul><p></p><p><b>
What We Offer:</b> Whether you&rsquo;re just starting out on your career journey or are an experienced professional, we offer a robust total rewards package with compensation; healthcare, wellness, retirement and work/life benefits; career development and recognition programs. Some of the benefits we offer include parental (including paternal) leave, flexible work schedules, achievement awards, educational assistance and child/adult backup care.</p><p></p><p><b><i>
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.</i></b></p><p></p>
The salary range for this role is 90,000 USD - 182,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.<p></p>
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.<p></p>
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.<p></p>
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.<p></p>
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.<p></p><p><i>
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.</i>
</p><p></p><p><b>Privacy Policy and Terms:</b></p><p>
Click on this link to read the Policy and Terms</p></div>

eWAN Information System Security Officer (ISSO) Onsite

CITY OF TOPEKA

<div><p>The City of Topeka is seeking an experienced Chief Security Officer (CSO) to lead and coordinate all aspects of physical and cybersecurity across the organization. The CSO will develop and implement comprehensive strategies and lead investigations to protect the City&rsquo;s information systems, infrastructure and data and ensure compliance with state, federal and local regulations.
</p><p><b>What you'll do:</b></p>
<ul><li>Develop and implement a unified security program aligned with the City&rsquo;s goals and regulatory standards.
</li><li>Collaborate with the City Manager and/or executive team to assess security posture and prioritize high-impact initiatives.
</li><li>Lead risk assessments, threat intelligence, and vulnerability management.
</li><li>Oversee incident response, crisis management, investigations, business continuity, and disaster recovery.
</li></ul><p><b>The ideal candidate:</b></p>
<ul><li>Has an expert understanding of cybersecurity principles, municipal governance, and regulatory compliance (CJIS, HIPAA, NIST, etc.).</li>
<li>Is highly organized with the ability to manage multiple projects and deadlines.</li>
<li>Has excellent leadership, communication and crisis management skills.
</li><li>Is a critical thinker, with the ability to analyze information, solve complex problems, and make sound decisions.
</li></ul><p><b>Minimum Qualifications:</b></p>
<ul><li>Bachelor&rsquo;s degree in Security Management, IT, Safety Management, Criminal Justice, or a related field is required with at least five years of experience in security administration and overseeing both physical and information security. OR
<ul><li>A high school diploma or its equivalent is required with nine years of experience in security administration and overseeing both physical and information security.
</li></ul></li><li>Relevant certification in IT management, such as Certified Information Systems Security Professional (CISSP), Certified Chief Information Security Officer (CCISO), and/or Certified Information Security Manager (CISM) preferred.</li>
</ul>
<p><b>Annual Entry Salary: </b>Up to $130,000 DOQ<br>
<br>
Click here to view the full position description (please right-click and open in new tab)</p>
<p><b>The City of Topeka offers a competitive compensation and benefits package, including:</b></p>
<ul><li>Health/Dental Insurance</li>
<li>Paid Life/Long Term Disability Insurance</li>
<li>Generous Paid Vacation &amp; Holidays</li>
<li>KPERS 401(a) Retirement Plan</li>
<li>(457) Deferred Comp Savings Plan</li>
<li>Short-Term Disability Insurance</li>
<li>Free Onsite Health &amp; Wellness Clinic</li>
<li>Full-service fitness facility</li>
<li>Free Parking</li>
<li>Employee Assistance Program</li>
</ul>
<p><i>The City of Topeka is an Equal Opportunity Employer</i></p></div>

Chief Security Officer (CSO)

Sora Marine Services

<p>IT Officer</p><p>Computer Systems / Office Administration</p><p>Sora Marine, Doha Head - Office</p><p><b>BASIC FUNCTION</b>:</p><p>Responsible for designing, organizing, modifying, and supporting the IT Infrastructure systems.</p><p><b>PRINCIPAL DUTIES AND RESPONSIBILITIES</b>:</p><p>Support LANs, WANs, network segments, Internet, and intranet systems.</p><p>Maintain system efficiency, network and system security, and analyze and isolate issues.</p><p>Maintain Marine IT Systems, CCTV Surveillance, and Navigation Equipment</p><p>Implementation of AI-driven tools and digital transformation technologies</p><p>IT Security: including endpoint protection (Defender) and network security (Sophos Firewall).</p><p>Ensure network connectivity throughout a company's LAN/WAN infrastructure is on par with technical considerations.</p><p>Design knowledge in Graphic Design, Website Design, and Social Media Management.</p><p>Review cyber security management plan and assessment and support to implement the same.</p><p>Maintain network facilities in individual machines, such as drivers and settings of personal computers as well as printers.</p><p>Troubleshoot problems reported by users, evaluate and modify system's performance.</p><p>Administer servers, desktop computers, printers, routers, switches, firewalls, phones, personal digital assistants, smartphones, software deployment, security updates and patches.</p><p>Mange &amp; implement backup system &ndash; On premises / Cloud</p><p>Be aware of HSE hazards and risks associated with operations process and implement control measures associated with the same.</p><p>Identify all threat to computers and server and take adequate safety precautions / measures to prevent the same.</p><p><b>SKILLS DATA</b>:</p><p>Logical and critical thinking and reasoning to identify the strengths and weaknesses of related and alternative solutions, conclusions or approaches to computer system problems and concerns, using scientific rules and methods to solve problems. Social skills, dealing with multi-nationalities.</p><p><b>COMPETENCE DATA</b>:</p><p>Education: Diploma / Degree / Certification in Information Technology Systems</p><p>Experience : Minimum 5 years&rsquo; experience.</p><p>Skills and Training : Computer literate with all applications, attention to detail, deadline-oriented, research, time-management, data entry, inter-personal skills</p><p>Job Type: Full-time</p><p>Pay: QAR3,000.00 - QAR5,000.00 per month</p>

IT Officer

Spell Engineering

<p><b>Key Responsibilities:</b></p><ul><li>Install, configure, and maintain computer hardware, software, systems, networks, printers, and scanners.</li><li>Monitor and maintain IT systems to ensure optimal performance and security.</li><li>Troubleshoot hardware and software issues and provide timely technical support to staff.</li><li>Manage user accounts, permissions, and access controls in accordance with company policies.</li><li>Implement and monitor data backup and disaster recovery strategies.</li><li>Maintain and update IT asset inventory, including hardware and software licenses.</li><li>Support the deployment and maintenance of cybersecurity measures (firewalls, antivirus, encryption, etc.).</li><li>Assist with the planning and implementation of new IT systems or upgrades.</li><li>Provide IT training and support to end-users to enhance digital literacy and productivity.</li><li>Ensure compliance with IT policies, data protection laws, and cybersecurity standards.</li><li>Liaise with external vendors and service providers to resolve technical issues or procure IT equipment.</li></ul><p><b>Qualifications and Requirements:</b></p><ul><li>Bachelor&rsquo;s degree in Information Technology, Computer Science, or a related field.</li><li>Minimum Proven Experience 6 month to 1 year as an IT Officer or similar role.</li><li>Strong knowledge of computer networks (LAN, WAN), hardware, and software troubleshooting.</li><li>Experience with operating systems (Windows, macOS, Linux) and office productivity tools.</li><li>Familiarity with database management, cloud platforms, and cybersecurity best practices.</li><li>Excellent problem-solving, communication, and organizational skills.</li><li>Ability to work independently and collaboratively in a team environment.</li><li>Relevant certifications (e.g CCNA) are an advantage.</li></ul><p><b>Key Competencies:</b></p><ul><li>Technical proficiency and analytical thinking</li><li>Attention to detail and accuracy</li><li>Strong interpersonal and communication skills</li><li>Ability to prioritize tasks and manage time effectively</li><li>Commitment to confidentiality and data security</li></ul><p>Job Type: Full-time</p><p>Work Location: In person</p>

CA Student Aid Commission

<p></p><div><div><div><div><div><div><div><div><div><div><div><div><div>The California Student Aid Commission (CSAC) is seeking a Chief Information Security Officer who is a visionary technology leader passionate about advancing California&rsquo;s mission to protect student information. CSAC invites dynamic, forward-thinking professionals to apply for the role of Chief Information Security Officer who will direct and lead the Information Security Office. In this role, you will be hands-on and be responsible for the direction, oversight, and operation of the Commission&rsquo;s information security services. You will directly and through subordinate resources, provide expert consultation on complex information security practices and provide leadership and direction to a diverse group of information security professionals and contract staff with different skill sets.</div><div><div><b><br>
This advertisement will remain open until the position has been filled. </b><b>Applications will be reviewed every 2 weeks, with the </b><b>first cutoff date being November 24, 2025.</b></div>
</div><div></div><p>You will find additional information about the job in the <b>Duty Statement</b>.</p>
</div><p></p><div><p>Working Conditions</p>
<p></p><ul><li>Exposure to computer screens and other basic office equipment.</li><li>
Work in a climate-controlled office environment, open office space with artifical lighting.</li><li>
Attend meetings in designated conference rooms and be willing to travel to off-site locations.</li><li><div>
Current residency in the State of California is required. This position is location is designated in Rancho Cordova, California and may be eligible for hybrid teleworking. The amount of telework is at the discretion of the Department and based on CSAC&rsquo;s current telework policy. While CSAC supports telework, regular in-person attendance will be required at CSAC&rsquo;s Rancho Cordova location based on operational needs. Teleworking from outside the State of California is strictly prohibited.</div></li></ul>
</div></div><p></p><div><div><p>Minimum Requirements</p>
You will find the Minimum Requirements in the Class Specification.<ul><li>
INFORMATION TECHNOLOGY MANAGER I</li></ul>
</div><div><p>Additional Documents</p>
<ul><li>Job Application Package Checklist</li><li>
Duty Statement</li></ul>
</div></div><div><div><p>Position Details</p>
<div><div><div><b>Job Code #:</b> </div><div>JC-498468
</div></div><div><div><b>Position #(s):</b>
</div><div><div>270-701-1405-XXX</div>
</div></div><div><div><div><b>Working Title:</b> </div><div><b>Chief Information Security Officer</b>
</div></div></div><div><div><b>Classification:</b> </div><div>INFORMATION TECHNOLOGY MANAGER I
<div>$9,387.00 - $12,579.00
</div>New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.
</div></div><div></div><div><div><b># of Positions:</b> </div><div>1
</div></div><div><div><b>Work Location:</b> </div><div>Sacramento County
</div></div><div><div><b>Telework:</b> </div><div>Hybrid
</div></div><div><div><b>Job Type:</b> </div><div>Permanent, Full Time
</div></div></div></div><div><p>Department Information</p>
<div>The California Student Aid Commission (CSAC), is the principal state agency responsible for administering financial aid programs for students attending public and private universities, colleges, and vocational schools in California. Our mission is to promote education equity by making postsecondary education affordable for all Californians. By joining us, you become part of a passionate and driven organization dedicated to its mission where all areas across the organization are aligned with the common goal of developing technical and analytical skills and leadership abilities, through promoting teamwork and cross-functional teams.<div><br>
The Information Technology Services Division (ITSD) supports CSAC in the delivery of State services and information to internal and external stakeholders through IT service management using the IT Infrastructure Library framework. CSAC operates in an Oracle-based database environment and develops and maintains a cloud-based application that is used by students, colleges, and CSAC staff (also known as the &ldquo;Grant Delivery System Modernization&rdquo; project or &ldquo;GDSM&rdquo;).</div>
</div><p>Department Website: https://www.csac.ca.gov/
</p></div></div><div></div><div><div><p>Special Requirements</p>
<div></div><div><div>Candidates are required to submit a Statement of Qualifications (SOQ). The SOQ is a narrative discussion of how the candidates&rsquo; education, training, experience, and/or skills qualify them for the position. The SOQ serves as documentation of each candidate&rsquo;s ability to present information clearly and concisely in writing. Resumes and/or cover letters do not take the place of the SOQ.</div><div><b><br>
Instructions: </b>The SOQ must be typed in 12-point Arial font, single spaced with one-inch margins and must be a minimum of one (1) page, not to exceed two (2) pages in length, and clearly titled &quot;Statement of Qualifications&quot;. Responses must be answered and numbered in the same order as the following questions:<br>
<br>
1. Describe a time when you led a response to an information security incident. What did the investigation reveal? What remediation was required? What was implemented to prevent future occurrences?<br>
<br>
2. Describe your experience leading enterprise information security programs. How have you aligned cybersecurity strategies with organizational goals, and what measurable outcomes resulted from your leadership?<br>
<br>
3. Describe examples of how you&rsquo;ve proactively addressed emerging cybersecurity threats or adopted innovative technologies to strengthen organizational resilience. What strategies did you use to gain stakeholder buy-in?</div><div>
</div><div></div><p><b>Applications received without a SOQ, following these instructions, will be rejected and disqualified from the hiring process.</b></p>
</div></div><div><p>Application Instructions</p>
<div><p>Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application.
</p>Final Filing Date: Until Filled
<p><b>Who May Apply</b></p>
<div>Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply. Individuals who are eligible for a Training and Development assignment may also be considered for this position(s).
<br>
<br>
Applications will be screened and only the most qualified applicants will be selected to move forward in the selection process. Applicants must meet the Minimum Qualifications stated in the Classification Specification(s).
</div><p><b>How To Apply</b></p>
<div>Complete Application Packages (including your Examination/Employment Application (STD 678) and applicable or required documents) must be submitted to apply for this Job Posting. Application Packages may be submitted electronically through your CalCareer Account at www.CalCareers.ca.gov. When submitting your application in hard copy, a completed copy of the Application Package listing must be included. If you choose to not apply electronically, a hard copy application package may be submitted through an alternative method listed below:<br>
<div><p><b>Address for Mailing Application Packages</b></p>
<p>You may submit your application and any applicable or required documents to:</p><br>
<div></div><div><div><div>CA Student Aid Commission
</div><div>Human Resources Office (USPS)
</div><div>Attn: Recruitment
</div><div>P.O. Box 419027
</div><div></div><div>Rancho Cordova, CA 95741
</div></div></div></div><div><p><b>Address for Drop-Off Application Packages</b></p>
<p>You may drop off your application and any applicable or required documents at:</p><br>
<div></div><div><div><div><div>CA Student Aid Commission
</div><div>Human Resources Office (DO)
</div><div>Attn: Recruitment
</div><div>11120 International Drive, Suite 100
</div><div></div><div>Rancho Cordova, CA 95670
</div><div></div><div>08:00 AM - 05:00 PM
</div></div></div></div></div></div><p><b>Required Application Package Documents</b></p>
<p>The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:
</p><ul><li>Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.</li>
<li>Resume is optional. It may be included, but is not required.</li>
<li>Statement of Qualifications - <b>A Statement of Qualifications (SOQ) is required and must be submitted with your application to be considered for this position. Applications received without the SOQ will be rejected and not considered. Please refer to the Special Requirements section of this job posting for the SOQ instructions.</b></li>
</ul></div>Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.
</div></div></div><div><p>Desirable Qualifications</p>
<div>In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:
</div><div><ul><li>Possess in depth knowledge of data governance frameworks and best practices for protecting confidentiality, integrity, and availability of sensitive information in a public sector environment.</li><li>
Possess expertise in Data Governance and Security.</li><li>
Demonstrate ability to develop and implement long-term strategic plans and policies that align technology security services with organizational mission, vision, and goals.</li><li>
Possess a track record of Ethical Leadership and Integrity.</li><li>
Familiar with State and Federal requirements like NIST 800-53, SIMM and SAM.</li><li>
Have security related certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar credentials.</li><li>
Have working knowledge of the following IT domains; business technology management (i.e., policy and program development, IT procurement, etc.), client services, and information security.</li><li>
Approach IT solutions from a security first perspective.</li><li>
Demonstrated experience leading a team of IT professionals.</li><li>
Enjoy developing and mentoring staff and highly functional teams.</li><li>
Exceptional communication engagement skills.</li><li>
Have high ethical standards, sound judgement, and integrity in all professional actions; proven ability to handle confidential and sensitive matters with discretion, and to model ethical conduct for others.</li><li>
Experience with Cloud Services, Office365, GitHub, SharePoint and ManageEngine Service Desk Pro.</li><li>
Strong understanding and experience with information security policies, procedures, processes and solutions.</li><li>
Proactively identify challenges and opportunities, develop innovative solutions, and build coalitions across departments to achieve shared goals and best practices.</li><li>
Experience with security incident management and investigations.</li><li>
Knowledge of continuity planning.</li><li>
Experience with risk management and mitigation.</li><li>
Experience in security assessments, audits, and litigation.</li><li>
Knowledge and experience in data privacy and classification.</li><li>
Have a basic understanding and experience with project management.</li></ul><br>
<div></div>
</div></div><div><p>Benefits</p>
<div>Benefit information can be found on the CalHR website and the CalPERS website.
</div></div><div><p>Additional Application Instructions</p>
<p><b>A completed application package must include the following:</b></p><ul><li>
On the Examination/Employment Application (STD. 678) enter the Position Number, Position Title, and Job Control Number in the &quot;Examination(s) or Job Title(s) For Which You Are Applying&quot; section.</li><li>
&quot;To&quot; and &quot;From&quot; dates (Month/Day/Year) and total hours worked per week for all employment history listed on the STD. 678.</li><li>
Name, address, and phone numbers of current and former employers and supervisors.</li><li>
&quot;To&quot; and &quot;From&quot; dates (Month/Day/Year) on the resume (if applicable).</li><li>
State employees must list the specific departments for which they worked and indicate the specific civil service classification held (not working titles).</li><li>
All required documents listed in the &quot;Required Application Documents&quot; section.</li><li>
If you are meeting minimum qualifications with education, you <b>must</b> include a copy of your official/informal transcripts for verification. These transcripts must include your name and the name of the school. Official transcripts may be required upon appointment.</li><li>
If you have a degree from outside of the United States, you must also submit an evaluation of this degree to determine its US equivalency. If you need an evaluation, you can visit this website https://www.naces.org/ to find organizations that provide these services.</li></ul>
All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification must be included in your completed Application Package to demonstrate how you meet the Minimum Qualifications for the position.<br>
<br>
<b>Failure to provide the information listed above may disqualify you from consideration for this recruitment.</b><br>
<br>
Resumes, Cover Letters, etc. DO NOT replace the required, completed Examination/Employment Application (STD. 678).<br>
<br>
<b>Personally Identifiable Information:</b><br>
Please do not include your Social Security Number, date of birth, veteran status, personal photos, LEAP information, or any other personally identifying information on any of your documents in your application package.<br>
</div><p></p><div><p>Diversity, Equity, and Inclusion at CSAC</p>
<p>Diversity Statement: Here at the CSAC, we want all of our employees to feel respected, valued, appreciated, and equipped to thrive. CSAC encourages employees to work together to fuel the creativity and innovation process necessary to serve our customers well. This commitment fosters and inclusive work environment where all backgrounds, cultures, and personal experiences are honored as we join in common cause to make college affordable for all California students.
</p></div><div><div><p>Equal Opportunity Employer</p>
<p>The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.
</p><p>It is an objective of the State of California to achieve a drug-free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.</p></div></div></div></div></div></div></div></div></div></div></div><div></div>

INFORMATION TECHNOLOGY MANAGER I

Search 10000+ Information security officer jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 information security officer jobs NEAR_ME

Information Security Officer

Chief Information Security Officer (CISO)

eWAN Information System Security Officer (ISSO) Onsite

Chief Security Officer (CSO)

IT Officer

IT Officer

INFORMATION TECHNOLOGY MANAGER I