Senior Information Security Officer

California Lottery; Sacramento (CA); Hybrid; USD 70,000 - 100,000; Full time

Job summary

California Lottery Information Technology Specialist II seeks to support the Information Security & Privacy Office. Under the ISO Manager, you will assist in ensuring confidentiality, integrity, and availability of Lottery information assets, with a focus on information security engineering.

This Sacramento-based role offers hybrid telework and requires occasional on-site reporting. Engage with cross-functional teams, contribute to risk management, policy development, incident response, and

Qualifications

• Expertise in developing, managing, and maintaining information security & privacy programs.
• Expert-level understanding of ISO 27001 and NIST 800-53 audits.
• Experience in information security operations including incident response and monitoring.
• Knowledge of cloud security, web application security, and AI governance.
• Policy, process, and procedure documentation development.
• Experience in risk management, governance, and strategic planning.
• Strong interpersonal and customer service skills with adaptability.
• Excellent written and verbal communication; capable of presenting to varied audiences.

Skills

InfoSec program mgmt

Incident response

Vulnerability assessments

Risk assessments

Cloud security

Web app security

AI governance

Policy documentation

Strategic planning

Stakeholder mgmt

Communication skills

Job description

Under the general direction of the California State Lottery’s Information Security & Privacy Manager, the Information Technology Specialist II (ITS II) will assist the Information Security and Privacy Office (ISO) in its mission of ensuring the confidentiality, integrity, and availability of Lottery Information Assets. The duties for this position are focused on the Information Security Engineering domain; however, work may be assigned in other domains as needed.

This position is headquartered in Sacramento and is eligible for a hybrid telework schedule. Employees must be able to report to their assigned headquarters office as assigned. Travel expense to and from the assigned headquarters are the responsibility of the employee. Eligibility for telework requires the employee to reside in California per California Government Code Section 14200 which states: “telecommuting means the partial or total substitution of computers or telecommunication technologies, or both, for the commute to work by employees residing in California.

You will find additional information about the job in the Duty Statement.

When choosing a state organization to work for, there are a lot of options. Why choose the California State Lottery?

People Are Drawn To The Lottery Because We:

• Are an energetic, creative, and talented team
• Value diversity and inclusion in the workplace
• Empower team members to bring their knowledge, expertise, and innovation
• Recognize individual and team contributions
• Support the importance of work-life balance
• Invest in the professional development of our team members
• Are dedicated to preserving our environment by lowering our carbon footprint

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Expertise in the development, management, and maintenance of an information security & privacy program.
• Expert-level understanding of compliance auditing of ISO 27001 and NIST 800-53 standards.
• Expertise in information security operations including incident response and system monitoring.
• Expertise in conducting vulnerability and risk assessments to identify security and privacy risks and completing a gap analysis.
• Knowledge of cloud security, web application security, and governance of generative artificial intelligence.
• Expertise in the development, management, and maintenance of information security and privacy policy, process, and procedure documentation.
• Experience in process improvement, strategic planning, information security governance, and risk management practices.
• Experience in managing vulnerability and patch management programs.
• Excellent interpersonal and customer service skills with the ability to adjust to changing priorities and quickly respond to urgent matters while keeping an Enterprise perspective and demonstrating initiative, ownership, accountability, and independence.
• Excellent written and verbal communication skills and conducting presentations before audiences of all levels and size.

Required Application Package Documents

The Following Items Are Required To Be Submitted With Your Application. Applicants Who Do Not Submit The Required Items Timely May Not Be Considered For This Job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications - Please see Statement of Qualification instructions below.