Information Security Specialist

The Department of Information Technology provides technology services and supports a wide variety of public services for County departments. These relate to networking, communication, security, hardware support, enterprise applications, and application design, development, and implementation. The department is made up of five divisions: Communications, Technology Management, Security, Enterprise Systems, and Administration divisions.

The Security division is looking for a talented individual to mature our organization's information security program.

We are looking for someone who is:

• Passionate about delivering business enabling security services
• Excited about championing information security improvements across the organization
• Driven by a desire to serve and protect the County and the public
• Open to the challenges of change, and thrives on working with others

What you will typically be responsible for:

• Collaborating with personnel across the organization to drive information security initiatives
• Deploying and operating information security services
• Developing information security policies, guidelines, and procedures
• Conducting incident response activities

A few reasons you might love this job:

• You will be part of the team that works to enable the County to deliver secure and trustworthy services
• You will be part of a team who prioritizes access to and time for training
• You will have the opportunity to work with teams and systems across the county

A few challenges you might face in this job:

• You will need to multitask effectively to deal with interruptions to your planned work
• You may encounter limited resources requiring a risk-based prioritization of work

Competencies Required:

Action & Results Focused (Taking Initiative): Initiating tasks and focusing on accomplishment

Adaptability: Responding positively to change and modifying behavior as the situation requires

Informing: Proactively obtaining and sharing information

Writing: Communicating effectively in writing

Building & Maintaining Relationships: Establishing rapport and maintaining mutually productive relationships

Coaching & Developing Others: Supporting others in stretching and expanding their capabilities

Driving Results: Demonstrating concern for achieving or surpassing results against an internal standard of excellence

Organizational Systems Thinking: Comprehending the organization as a system of integrated and interdependent functions

Project Management: Ensuring that projects are on-time, on-budget, and achieve their objectives

To read the complete job description, please visit the website:

The eligible list established from this recruitment may be used to fill future openings for up to six (6) months.

Any combination of education, certifications, and experience that would likely provide the required knowledge, skills, and abilities is qualifying. A typical way to obtain the knowledge, skills, and abilities would be:

Education: Possession of a Bachelor's degree from an accredited college or university with major course work in computer information systems, computer science, business administration, public administration, public policy, communications, law, psychology, economics, risk management, intelligence, or related field.

Certification: Professional security or privacy certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Global Information Assurance Certification (GIAC), International Association of Privacy Professionals (IAPP), or other similar credentials.

Experience: Two (2) years of full-time experience performing information security duties, which may include implementing, overseeing, and/or managing information security technologies, process, or programs, including identification, protection, detection, response, and recovery activities.

Desirable Qualifications:

• Familiarity with regulatory/compliance requirements such as HIPAA, CJIS, CCPA, IRS Publication 1075, and PCI.
• Can understand and communicate security and risk controls frameworks (CIS, NIST, ISO)

• Application Filing and Evaluation: Applicants will be required to complete a supplemental questionnaire at the time of application. Applications will be evaluated to determine which candidates will move forward in the next phase of the recruitment process.
• Training and Experience Evaluation: Consists of an evaluation of each candidate's relevant education, training and/or experience as presented on the application and supplemental questionnaire. (Weighted 100%)

The Human Resources Department may change the examination steps noted above in accordance with the Personnel Management Regulations and accepted selection practices.

For recruitment specific questions, please contact Austin Wagers at For any technical issues, please contact the GovernmentJobs' applicant support team for assistance at

CONVICTION HISTORY

After you receive a conditional job offer, you will be fingerprinted, and your fingerprints will be sent to the California Department of Justice (DOJ) and the Federal Bureau of Investigation (FBI). The resulting report of your conviction history (if any) will be used to determine whether the nature of your conviction conflicts with the specific duties and responsibilities of the job for which you have received a conditional job offer. If a conflict exists, you will be asked to present any evidence of rehabilitation that may mitigate the conflict, except when federal or state regulations bar employment in specific circumstances. Having a conviction history does not automatically preclude you from a job with Contra Costa County. If you accept a conditional job offer, the Human Resources department will contact you to schedule a fingerprinting appointment.

DISASTER SERVICE WORKER

All Contra Costa County employees are designated Disaster Service Workers through state and local law. Employment with the County requires the affirmation of a loyalty oath to this effect. Employees are required to complete all Disaster Service Worker-related training as assigned, and to return to work as ordered in the event of an emergency.

EQUAL EMPLOYMENT OPPORTUNITY

It is the policy of Contra Costa County to consider all applicants for employment without regard to race, color, religion, sex, national origin, ethnicity, age, disability, sexual orientation, gender, gender identity, gender expression, marital status, ancestry, medical condition, genetic information, military or veteran status, or other protected category under the law.