Cybersecurity Incident Lead (ISA II)

San Bernardino County; California (MO); On-site; USD 90,000 - 130,000; Full time

Job summary

San Bernardino County seeks an Information Security Analyst II to monitor, analyze, and respond to cybersecurity incidents across county systems and data assets. The role collaborates with IT teams, departments, and external partners to identify threats, assess risks, and implement remediation.

The ideal candidate will lead response efforts, perform vulnerability assessments, and drive improvements in security governance, compliance, and staff training. On-call rotations may be required.

Qualifications

• Three years of experience assisting with the implementation, management, and monitoring of IT security solutions and programs.
• Sixty (60) semester units of coursework in information security or related field.
• Master’s degree in information systems / information security / IT / CS or closely related field (preferred).
• Relevant certifications such as CEH, CSA, or CISSP are desirable.

Responsibilities

• Monitor, analyze, investigate, and respond to cybersecurity events and incidents affecting county systems, applications, networks, and information assets.
• Lead response efforts in collaboration with IT teams, vendors, and cyber intelligence partners.
• Coordinate cybersecurity incidents with Human Resources, county departments, and outside agencies.
• Educate team members and leadership on security measures, policies, and best practices.
• Lead or coordinate vulnerability assessments with focus on threat intelligence and remediation.
• Collaborate on network security design enhancements.
• Lead countywide Security Awareness Training and Phishing Simulation programs.
• Review contracts, procurement documents, and licensing for cybersecurity, privacy, and compliance risks.

Job description

San Bernardino County seeks an Information Security Analyst II to monitor, analyze, and respond to cybersecurity incidents across county systems and data assets. The role collaborates with IT teams, departments, and external partners to identify threats, assess risks, and implement remediation.

The ideal candidate will lead response efforts, perform vulnerability assessments, and drive improvements in security governance, compliance, and staff training. On-call rotations may be required.