Security Manager – Security Architecture & Data Protection for CalSAWS

Regional Government Services; California (MO); On-site; USD 108,000 - 172,000; Full time

Job summary

Regional Government Services is seeking an experienced Security Manager – Security Architecture & Data Protection to shift security left across applications, cloud, integrations, and data. You will lead security architecture reviews, evaluate risks, and partner with engineering, security, procurement, and business teams to implement secure-by-design practices.

The ideal candidate has broad DSPM, DLP, and Insider Risk expertise, plus strong authentication, encryption, and data protection controls

Qualifications

• Bachelor’s degree in information security, computer science, information systems, cybersecurity, or related field; a master’s degree preferred.
• Six (6) years of progressively responsible security architecture, information security, data protection, privacy, or related experience, with at least two (2) years in a supervisory role.
• Hands‑on experience performing security architecture and design reviews for complex enterprise systems.
• Deep expertise in DSPM, DLP, and Insider Risk disciplines across multi‑cloud environments.

Responsibilities

• Lead security architecture reviews for new and changing technologies.
• Evaluate security risks and design decisions, establishing effective controls to protect information.
• Partner with innovation, application, infrastructure, security, and business teams to advance secure‑by‑design practices.
• Communicate complex security findings into clear recommendations for leadership and partners.

Skills

DSPM

DLP

Insider Risk

Security Architecture

Education

Bachelor's degree in information security, CS, or related field

Master's degree preferred

Job description

We’re looking for an experiencedSecurity Manager- Security Architecture & Data Protection to shift security left and shape how security is designed across applications, cloud, integrations, and data. Do you have the technical expertise to evaluate cloud architecture, application designs, integrations, data flows, and emerging technologies while translating complex security risks into practical recommendations? Are you ready to help CalSAWS strengthen enterprise security and protect sensitive data across one of the nation’s largest public‑sector technology environments?

Position Information

The Security Manager – Security Architecture & Data Protection reports to the Chief Information Security Officer (CISO) and plays a critical role in strengthening the CalSAWS enterprise security program by ensuring security is incorporated into technology, applications, data, and business processes from the start.

This position leads security architecture reviews for new and changing technologies, evaluates security risks and design decisions, and establishes effective controls to protect sensitive information. The Security Manager partners closely with innovation, application, infrastructure, security, and business teams to advance secure‑by‑design practices and strengthen CalSAWS' enterprise data protection capabilities.

The Ideal Candidate Will:

• Be an experienced security professional who can operate comfortably at both the architectural and enterprise governance levels.
• Have hands‑on experience conducting security architecture and design reviews for complex enterprise systems.
• Be comfortable reviewing cloud architecture, challenging application designs, evaluating identity and integration patterns, and discussing data flows with engineers.
• Bring strong expertise in enterprise data protection, including DSPM, DLP, Insider Risk, data discovery, and classification.
• Possess a strong understanding of authentication and authorization, encryption, key and secret management, network security, least privilege, logging and monitoring, vulnerability management, and secure software development.
• Understand privacy‑by‑design principles, including data minimization, appropriate use, retention, transparency, and sharing constraints.
• Effectively translate complex security risks and technical findings into clear, practical recommendations for leadership and business partners.
• Demonstrate strong judgment when balancing security requirements with operational, technical, and delivery considerations.
• Be highly organized and capable of managing multiple concurrent reviews, requests, risks, and stakeholder relationships.
• Communicate clearly and concisely through decision logs, technical summaries, recommendations, and audit‑or client‑ready documentation.
• Thrive in a collaborative environment requiring partnership across security, technology, procurement, compliance, and business teams.
• Be motivated by creating a culture in which security and data protection are incorporated into technology decisions from the start.

Preferred certifications may include:

• CISSP, CISM, CRISC, CCSP, CDPSE, CIPM, or equivalent security certifications
• GIAC certifications
• Security+ or equivalent
• Cloud security certifications
• AWS Security Architect or equivalent

All positions may be subject to some short‑term travel in order to conduct project business with the state and counties. The CalSAWS project office is currently located in Gold River, California.

Who is CalSAWS?

The California Statewide Automated Welfare System (CalSAWS) is the largest county‑based human services system in the nation. In June 2019, all 58 California counties formed the CalSAWS Consortium as a Joint Powers Authority (JPA) to govern system operations and represent the collective interests of every county.

As of October 2023, CalSAWS successfully unified all counties into a single statewide system. CalSAWS is now in its Maintenance and Operations (M&O) phase, ensuring reliable, secure, and efficient system functionality for millions of Californians.

This role represents a critical opportunity to improve enterprise alignment upstream of delivery, helping CalSAWS reduce downstream friction, improve coordination, and support more cohesive customer and workforce experiences statewide.

TRAINING AND EXPERIENCE:

• Graduation from an accredited college with a bachelor’s degree in information security, computer science, information systems, cybersecurity, or a related field. A master's degree is preferred.
• Six (6) years of progressively responsible, full‑time, paid experience in security architecture, information security, data protection, privacy, data security, or a similar operational role, with demonstrated depth in DSPM, DLP, and Insider Risk disciplines in a multi‑cloud environment. At least two (2) years of experience must have been in a supervisory capacity.

Candidates should also demonstrate:

• Hands‑on experience performing security architecture and design reviews for complex enterprise systems
• Experience with data protection‑by‑design, AI/ML systems, input/output monitoring, data residency enforcement, and access controls
• Strong knowledge of authentication and authorization controls, encryption, key management, secret management, network security, classification, retention, least privilege, logging and monitoring, vulnerability management, and secure software development
• Working knowledge of privacy‑by‑design principles
• Working knowledge of data security and security architecture reviews
• Experience supporting vendor onboarding, system and security reviews, procurement/third‑party risk management processes, and data inventories
• Experience managing structured workflows involving intake, triage, documentation tracking, and closure across multiple stakeholders

Experience working in large‑scale enterprise or public‑sector environments is strongly preferred.

BENEFITS and SALARY INFORMATION:

SALARY: $9,684.12 – $15,375.00 monthly depending on experience.

For information on benefits through RGS employment - - https://rgsjpa.org/rgs-employees-assigned-to-calsaws/

EMPLOYMENT:

For candidates employed with a county in California who are not able to support a staff member on the CalSAWS project, the CalSAWS Consortium contracts with Regional Government Services (RGS) to provide staff for the consortium. Hires from this recruitment and selection process are expected to work for the CalSAWS Consortium through the contract with Regional Government Services (RGS), which provides staff for the consortium.

Application Deadline – October 16, 2026

All submissions will be reviewed by CalSAWS, with interviews scheduled for the most qualified candidates.

CalSAWS is not responsible for failure of internet forms or email in submitting your application. Candidates who may require special assistance in any phase of the application or selection process should advise CalSAWS by emailing [e-mail]

CalSAWS is an Equal Opportunity Employer.