Senior Information Technology Security Officer

The Department of Homeless Services and Housing is seeking qualified candidates to fill emergency Departmental Information Security Officer II (payroll title) vacancies related to the homelessness crisis. Applicants who meet the requirements may be hired for an initial period of up to 90 days, with an opportunity for permanent County employment.

During your initial work period, you will be assessed on your work performance. This assessment will be weighted 100%.

Those who successfully pass the assessment will be considered for permanent appointment to Departmental Information Security Officer II.

Essential Job Functions

• Develop and manage the department’s Information Security Program, including policies, standards, and cybersecurity controls in line with Countywide requirements.
• Conduct risk and vulnerability assessments, oversee remediation, and coordinate investigations with County cybersecurity leaders and external agencies.
• Ensure compliance with audits, regulations, and contractual obligations while providing guidance to management and program staff.
• Partner with IT teams, developers, and stakeholders to design secure systems and integrate cybersecurity into daily operations, contracts, and recovery planning.
• Lead cybersecurity awareness and training efforts, represent the department on Countywide cybersecurity committees, and share best practices.
• Establish and direct the Departmental Cybersecurity Emergency Response Team (DCERT) and serve as liaison to Countywide cybersecurity and privacy programs.
• Supervise staff as needed and act as a subject-matter expert in technical or legal matters related to cybersecurity.

Requirements to Qualify

Option I: A Bachelor’s Degree* in Computer Science, Information Security, Information Assurance, or a related discipline -AND- Five (5) years of experience in all of the following areas: risk management**, information security, cybersecurity, incident response, and privacy roles -AND- Two (2) years of experience in managing and coordinating information security projects -AND- possession of one or more of the following certifications***: CISSP, CISM, CCISO, or equivalent.

Option II: Three (3) years of experience administering an Information Security Program, including responsibility for risk management**, information security, cybersecurity, incident response, and privacy coordination at the level of Departmental Information Security Officer I**** -AND- possession of one or more of the following certifications***: CISSP, CISM, CCISO, or equivalent.

Applications will be accepted until Monday, November 3rd at 5:00 p.m.