Chief Information Security Officer

State of California - Department of Developmental Services; Sacramento (CA); Hybrid; USD 150,000 - 210,000; Full time

Job summary

The California Department of Developmental Services (DDS) is seeking a Chief Information Security Officer (Information Technology Manager II) to lead the department’s enterprise information security program at its Sacramento headquarters.

The CISO is responsible for establishing and maintaining enterprise-wide information security policies, standards, and procedures, and for directing the department’s risk management and compliance activities.

Qualifications

• Provides executive-level leadership for cybersecurity strategy.
• Oversees risk management and compliance activities.
• Directs incident response and vulnerability management.
• Advises leadership on emerging threats and technology risks.

Responsibilities

• Lead the department’s enterprise information security program and policies.
• Direct security awareness efforts across the enterprise.
• Advise department leadership on threats and risks.
• Maintain security in accordance with state requirements.

Skills

Cybersecurity leadership

Security strategy

Risk management

Policy development

Incident response

Vulnerability management

Executive leadership

Job description

Job Description and Duties

The California Department of Developmental Services (DDS) is seeking a Chief Information Security Officer (Information Technology Manager II) to lead the department’s enterprise information security program at its Sacramento headquarters. The CISO is responsible for establishing and maintaining enterprise-wide information security policies, standards, and procedures, and for directing the department’s risk management and compliance activities.

The incumbent provides executive-level leadership for cybersecurity strategy, oversees incident response and vulnerability management, and ensures department systems and data are protected in accordance with state security requirements. The CISO advises department leadership on emerging threats and technology risks and directs security awareness efforts across the enterprise.

Desirable qualifications include broad knowledge of enterprise information security principles, frameworks, and practices, and the ability to lead and manage an enterprise information security program, including policy development and risk management.

This position is eligible for hybrid telework.

Final Filing Date: 10/14/2026