Information Security Analyst III

Sacramento County, CA; Sacramento (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

Sacramento County is seeking a lead Information Security Analyst to oversee ISA I/II staff and align security programs with County policies. You will plan, schedule, and review work while ensuring compliance with laws and standards.

The role requires cultivating a security-conscious culture, performing audits, and guiding incident responses to protect data and infrastructure assets.

Qualifications

• Two years of full-time paid professional experience in information security or closely related field.
• Experience in risk analyses, security controls, and leading security or compliance initiatives.
• Ability to lead, mentor staff and communicate policies effectively.

Responsibilities

• Lead Information Security Analyst Level I/II staff and oversee their work.
• Plan, schedule, assign, and review tasks to ensure policy compliance.
• Monitor security controls, audits, and regulatory changes.
• Provide training and guidance on information security practices.
• Develop metrics to demonstrate control effectiveness and risk management.

Skills

Leadership

Risk analysis

Information security

Regulatory compliance

Auditing

Incident response

Job description

Continued Filing Exam

This is a continuous filing exam. Next filing cut-offs are at 5:00 pm on:

10/2/2026, 10/16/2026 (Final)

Under general supervision, leads, plans, schedules, and oversees the work of Information Security Analysts Level I/II (ISA I/II) while performing the same and/or more difficult duties as those being led; ensures completion of tasks in accordance with established policies and procedures; communicates policies, procedures, and job expectations; and provides training to staff. Utilizes skills that require technical expertise and an understanding of complex information security programs, integrating privacy and security concerns with, with, and fostering, an accountable and information security-conscious culture. The Information Security Analyst III (ISA III) is responsible for ensuring that the County’s security and privacy posture stays in alignment with County policies, standards, and guidelines and all applicable Federal, State, and local laws through ongoing testing and periodic auditing.

Knowledge Of:

• Principles and practices of leadership, mentoring, and training
• Applicable federal, state, and local laws, codes, and regulations
• Operational characteristics, services, and activities of assigned programs and functions
• Enterprise Networking, Identity Management, and Data Processing Technologies
• Office procedures, methods, and equipment including computers and applicable software applications such as word processing, spreadsheets, databases, and other specialized applications related to area of assignment
• English usage, spelling, grammar, and punctuation
• Information security solutions for data, application and infrastructure protection
• Metrics that demonstrate information security control effectiveness
• Regulatory changes that affect information security policy, standards and procedures
• Corrective actions to comply with applicable regulations and policies
• Security issues, techniques and implications across all existing computer platforms
• Security auditing and disaster recovery design
• Risk assessment methods and technologies
• Legal and regulatory security developments
• Reporting on information security

Ability To:

• Lead and train Information Security Analyst Level I/II staff
• Plan, coordinate, assign, and review the work of staff
• Identify and respond to advanced persistent threats
• Provide work direction and instruction
• Research and evaluate work problems, and recommend solutions
• Develop and maintain cooperative, effective working relationships with others
• Communicate clearly and concisely, both verbally and in writing
• Interpret and apply applicable federal, state, and local laws, codes, and regulations
• Apply customer service skills, including the identification of customer needs and follow up to ensure customer commitments have been met
• Develop metrics to demonstrate information security control effectiveness
• Keep apprised on information security policy, standards and procedures
• Define information security services to meet business needs
• Recommend corrective actions to comply with Federal regulations and County policies
• Develop strategies and plans to enforce security requirements and address identified risks
• Provides guidance on business continuity and disaster recovery design
• Monitor compliance with security policies, standards, guidelines and procedures
• Monitor the legal and regulatory environment
• Conduct security audits

Minimum Qualifications

Two years (2) of full-time paid professional experience in information security or closely related field, with experience in one or more of the following areas: conducting in-depth risk analyses, developing advanced security controls, and leading security or compliance projects and initiatives.

Note: Completion of coursework in Cybersecurity, Computer Science, Information Systems, Information Technology, or other field closely related to the intent of the class at an accredited college or university may be substituted for up to one year of the required experience.

Note: If the word “experience” is referenced in the minimum qualifications, it means full-time paid experience unless the minimum qualification states that volunteer experience is acceptable. Part-time paid experience may be accumulated and pro-rated to meet the total experience requirements.

Note: If the minimum qualifications include an educational or certificate/license requirement, applicants must submit proof of requirements with the application. Failure to submit proof of requirements may result in disqualification from the examination. Unofficial transcripts are acceptable. For guidelines on submitting acceptable proof of educational requirements, please speak to someone in our office before the cut-off date listed in this notice.

GENERAL QUALIFICATIONS

Criminal History and Background Checks:

The County may access criminal history information on candidates who have accepted a conditional offer of appointment for this class consistent with the provisions of Board of Supervisors Resolution No. 82-602, Personnel Policies, and applicable federal and state laws. The County shall not consider for employment any candidate who has been convicted of a felony or misdemeanor that relates to or impacts the candidate’s ability to perform the job duties of this class unless it is determined that mitigating circumstances exist. For purposes of accessing criminal history information, the candidate will be fingerprinted. A subsequent arrest notification may be obtained.

The County may also conduct a background check on the candidate prior to appointment to a position within this class. The background check may include personal and professional reference checks, credit history checks where authorized by Labor Code section 1024.5, Social Security Number verification, professional license/registration verification, military service information and driving history. Information obtained in the course of this background check will be considered by the appointing authority in the selection process. In obtaining such information, the County will comply with applicable consent and disclosure practices in the Fair Credit Reporting Act and the California Investigative Consumer Reporting Agencies Act.

License Requirement:

A valid California Driver License, Class C or higher, may be required at the time of appointment. Failure to obtain or maintain the appropriate California Driver License, or comply with state and federal requirements for utilization, may constitute cause for personnel action in accordance with Civil Service Rules or applicable bargaining agreement. Individuals who do not meet this requirement due to disability will be reviewed on a case-by-case basis.

Physical Requirements:

• Distinguish between different colors.
• Lift equipment that weighs up to 50 pounds.

Individuals who do not meet these requirements due to disability will be reviewed on a case-by-case basis.

Working Conditions:

• Work weekends, holidays, and non-routine hours.
• Travel occasionally.

Probationary Period

The probationary period for this classification is Twelve(12) months.

County of Sacramento

Department of Personnel Services

Employment Services Division

700 H Street, Room 4667

Sacramento, CA 95814

Phone [phone]; 7-1-1 California Relay Service

Email [e-mail]

Inter-Office Mail Code: 09-4667

www.SacCountyJobs.net

For information regarding County jobs: www.governmentjobs.com/careers/sacramento

Sacramento County is about enriching communities to thrive. We strive to create inclusive workplaces that reflect the communities we serve. We value and celebrate the unique perspectives, backgrounds, abilities, and diverse dimensions of our employees and residents. Through transparency, courage, innovation, and trust we are committed to advance equity and transformational change.

We are a proud equal opportunity employer. If you need assistance or an accommodation due to a disability for any phase of the hiring process, please contact our Disability Compliance Office at [e-mail] or 916-874-7642, CA Relay 711. For more information, visit: Reasonable Accommodation Requests - Job Applicant Instructions