Chief Information Security Officer

Job Description and Duties

The Information Manager I serves as the Chief Information Security Officer (CISO) for the Department of Water Resources (DWR). The CISO provides policy direction and oversight related to the Department Information Security programs and practices. The CISO has authority for formulating, recommending, and implementing Information Security policies, principles, processes, and guidelines that help to ensure the integrity, confidentiality, availability, reliability, and appropriate use of the Department's information assets. The CISO has full management responsibility of the Information Security Office, and for Information Security Operations for the Department of Water Resources. The position is responsible for providing critical Security Operations services in support of the Department's programs, strategic goals, and business objectives.

You will find additional information about the job in the .

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

The ideal candidate will possess:

Knowledge of the principles and policies of standard practices for Information Security and Privacy Protection. Ability to analyze and formulate policies, organizations, procedures, and practices. Ability to plan, organize, and lead the work of multi-disciplinary professionals. A high degree of experience and knowledge in the practices, principles, and techniques of information security and security engineering, implementation, and operations. Possess a background in the development of security policies and procedures, and security awareness programs. Strong management and leadership skills in the information technology arena. Strong communication and interpersonal skills, and problem solving skills.

Possession of Security Certifications levels such as CISSP (certified information security professional) or CISM (certified information security manager). Please provide proof of such certifications.

Benefits

to read about the outstanding benefits offered to eligible employees

Personal Leave Program 2025: Effective July 1, 2025, state employees are subject to temporary wage reductions in exchange for Personal Leave Program (PLP) accruals. The specific rate and hours earned were negotiated and agreed upon by each bargaining unit. The actual monetary impact of these temporary reductions can vary based on your bargaining unit and/or federal and state tax withholdings. For additional information please visit

Special Instructions

To be considered, submit a completed State application (STD. 678), Resume, and Supplemental Questionnaire . Please reference SAP Position #50045901 and Job Control #522270 in the “examination(s) or job title(s) for which you are applying” section of your application.

The Supplemental Questionnaire is designed to elicit information regarding each applicant’s abilities, knowledge, and experience in relation to the advertised position. Please limit your answers to 3 questions per page (12 point Arial font) and no more than 2 pages total.

1. Provide a description of your experience related to the development, implementation, and compliance monitoring of information security policies. Include the number of years of experience in this area and example of where these activities were performed.

1. Describe your experience at the managerial level in the strategic planning and operational tactical planning efforts related to information technology security and/or enterprise information technology operations.

1. Describe your leadership and management experience demonstrating an ability to create a clear vision, set goals and expectations, motivate initiatives at all levels, and exercise sound judgement in developing and managing Information Technology systems and/or operations in support of a departmental mission, vision, and goals.

1. Provide example(s) (include time-period and where) that demonstrated experience and knowledge in the information security engineering and security controls implementation and operations.

1. Describe your experience at the managerial level in establishing collaborative relationships internally and externally, and resolving disagreements between and/or among multiple stakeholders at various levels.

1. Provide a description of your experience related to the development and implementation of information security policies operational principals, practices, processes, and procedures. Include the number of years of experience in this area and example of where these activities were performed .

The following basis of eligibility will be considered: List eligibility, transfer, LEAP, reinstatement, and SROA/Surplus. The hiring unit will receive only the documents specified in the Required Application Package Documents section. Resumes, cover letters, and/or other attachments will not be accepted in lieu of a completed application.

. This survey is for research purpose only and will not affect the application status.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Other - See Supplemental Questionnaire information under Special Instructions below.