Overview
Skills
Job Details
The current vacancy is in the Information Technology Department on the Information Security Team. The Information Security Team is building a cyber GRC program in addition to continuing our focus on security operations(secops). This is a developing part of the Placer County s information technology security program and will offer opportunities for innovation and growth. This position will be the first in the team to support these efforts and will have a unique opportunity to work in tandem with the Chief Information Security Officer and the Chief Information Officer to develop and design the program.
This position will require occasional evening and weekend work. The Information Technology Department offers hybrid work schedules combining in-office and remote work each week, as well as flexible, alternate work schedule options. The incumbent must be able to report to the worksite during emergencies within a reasonable response time.
Experience: Two years journey level professional information technology experience comparable to an Information Technology Analyst II with Placer County.
Training: Equivalent to completion of a bachelor's degree from an accredited college or university with major coursework in computer science, information systems or a closely related field. Additional relevant technical experience that demonstrates the ability to perform analytical duties in assigned technology area may substitute for the required education on a year for year basis. Possession of one or more approved information technology certificates and/or completion of other approved technology-related training may substitute for some or all of the required education.
The incumbent will be a cyber GRC lead with Business Continuity (BC), cyber risk assessment, technology policy management skills, third party vendor risk management skills, and assessing and calculating the potential financial impact of cyber threats prioritizing on what cyber risks need to be addressed based on constrained budget and map security audits and assessments to clear and actionable mitigation plans. During the course of work, the incumbent will be interacting with a wide variety of users, vendors, and partner agencies.
EOE