Salary Range

$148,761.60 - $179,982.40

Job Description

The Superior Court of California, County of Alameda is accepting applications for the position of Information Systems Security Officer. Under direction, the Information Systems Security Officer (ISSO) develops and manages the Court’s Information Technology (IT) Security program; Works closely with IT teams to identify, assess, and mitigate security risks; works with incident response management teams to contain security incidents and prevent future incidents; leads the implementation of risk mitigation efforts, performs monitoring and testing, and assesses the output of tests and scans to develop corrective action plans, and recommends policies and procedures to senior leadership; and performs other related duties as assigned.

The ISSO is a management-level class that reports to the Information Technology Director within the Office of Information Technology. The ISSO should have a forward-looking approach to IT security, risk mitigation, and resilience, to ensure all technological infrastructures reflect best-in-class security practices. The ISSO is distinguished from the Sr. IT Manager in that the latter is responsible for planning, coordinating, and supervising complex operations and work of professional staff within multiple information technology work units of Application Services and IT Business Solutions or Infrastructure Services and Client Services and provides guidance and direction to other IT Managers;  whereas, the former is a very specialized position that manages IT Security, including safeguarding infrastructure and managing vulnerabilities to enforcing best-in-class cybersecurity practices, compliance and risk mitigations.

The current vacancy is located in the Office of Information Technology at the East County Hall of Justice in Dublin, California.
 

Example of Duties

NOTE: The following are duties performed by employees in this classification. However, employees may perform other related duties at an equivalent level. Each individual in this classification does not necessarily perform all listed duties.

1. Analyzes networks, systems, hardware, and software for security vulnerabilities, and designs and configures security measures.

2. Manages court-wide information security awareness and training programs.

3. Configures and uses tools, industry best practices and security framework guidelines such as National Institute of Standards and Technology to monitor and investigate computer networks for security issues and suspicious activities; prepares security incident reports.

4. Researches emerging threats and vulnerabilities to aid the identification of network incidents, and creates new architectures, policies, standards, and guidance to address them.

5. Creates business continuity/disaster recovery plans; publishes test results and implements changes to address deficiencies.

6. Coordinates the testing of new computers, software, and networking hardware before implementation to safeguard and secure the court’s information systems.

7. Assesses the vulnerability of the Court's information system; develops and executes the Court's information security strategies, policies, and procedures, including the identification and analysis of information security threats in order to protect the Court's computer infrastructure, network, and data. Creates systems and procedures to assess and track compliance with Court security policies.

8. Coordinates with vendors, participates in or leads cross functional project teams, and perform critical incident response.

9. Meets and consults with customers and vendors regarding IT security needs; oversees and participates in the design, development, delivery and/or implementation of IT security-related products to meet those needs; assumes responsibility for procurement of services and goods required.

10. Responsible for the development of specifications for "requests for proposal" pertaining to external security-related services; reviews submissions and provides recommendations on vendor selection; ensures vendor performance meets compliance, Court standards and specification.

11. Directs the management and governance of security-related projects of varying size and scope to enhance and/or upgrade technology services and utilization.

12. Prepares reports, correspondence and other documents; participates on committees and task forces; attends meetings, conferences and training sessions.

13. May supervise or lead other IT security related professionals, including overseeing their work quality, training, instruction, and work assignments.

14. Performs other related duties as assigned.

Minimum Qualifications<