Senior IT Security & GRC Lead — Remote

California High-Speed Rail Authority; Sacramento (CA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

California High-Speed Rail Authority is seeking an IT Specialist II (Information Security Specialist) to lead the Enterprise Governance, Risk, and Compliance program. You will plan, implement, and oversee enterprise-wide GRC activities, focusing on identifying and managing information security risks and developing policies and procedures.

You will also coordinate reporting on governance and compliance, drive a risk-based decision framework, and work with IT and business units to strengthen

Qualifications

• Hands-on experience with AWS platforms, SaaS integration, and enterprise application architecture.
• Proficiency in programming languages such as .Net and Python.
• Experience with SaaS applications such as ServiceNow and Salesforce.
• Experience with APIs and complex integrations.
• Familiarity with generative AI tools and frameworks (e.g., OpenAI, Copilot Studio, Azure AI).
• Knowledge of project management practices and system development lifecycle.
• Service-oriented and customer-relations-sensitive attitude.
• Ability to manage multiple high-priority initiatives in a fast-paced environment.
• Ability to maintain confidentiality of sensitive tasks and information.

Responsibilities

• Plan, implement, maintain, and oversee enterprise-wide GRC activities.
• Develop, document, and maintain information security policies, standards, and procedures.
• Lead risk identification, evaluation, mitigation, and monitoring activities.
• Coordinate enterprise reporting on governance, risk posture, privacy, and compliance performance.
• Establish and maintain a repeatable risk management framework aligned with requirements.
• Collaborate with IT and business units to drive risk-based decision-making.

Skills

AWS platforms

SaaS integration

enterprise application architecture

.Net

Python

APIs

Information security

risk management

governance, risk and compliance

Tools

ServiceNow

Salesforce

Job description

California High-Speed Rail Authority is seeking an IT Specialist II (Information Security Specialist) to lead the Enterprise Governance, Risk, and Compliance program. You will plan, implement, and oversee enterprise-wide GRC activities, focusing on identifying and managing information security risks and developing policies and procedures.

You will also coordinate reporting on governance and compliance, drive a risk-based decision framework, and work with IT and business units to strengthen