<p>Job Description and Duties</p> <p>Under the general direction of the State Chief Information Security Officer (State CISO), the Deputy State Chief Information Security Officer (Deputy State CISO) is responsible for the development, maintenance, implementation and enforcement of statewide policies to ensure the California Department of Technology (CDT) can provide for the safety and security of the technical infrastructure and the data and information of California State Organizations. The Deputy State CISO will have primary responsibility for managing the Risk Governance, Advisory, Audit/Compliance, and Security Operations, which includes Security Assurance, Security Solutions and Security Threat Management, also known as Security Operations Center (SOC). The Deputy State CISO will be focused on evolution, execution and promotion of statewide security strategy with internal and external stakeholders. The Deputy State CISO will also have responsibility over the operational support of Incident Response and threat intelligence staff embedded within the California Cybersecurity Integration Center (Cal-CSIC) within the Governor's Office of Emergency Services.</p> <p>CA Residency:</p> <p>Candidates who reside outside of the State of California may be admitted to the job interview. However, upon a job offer, candidates must provide proof of residence in California prior to their appointment becoming effective, or the offer may be rescinded.</p> <p>You will find additional information about the job in the Duty Statement.</p> <p>Minimum Requirements</p> <p>This position does not have a Classification Specification. Requirements and qualifications for this position can be found in this announcement. For additional questions, please contact the hiring department listed below.</p> <ul> <li>C. E. A. </li></ul> <p>Additional Documents</p> <ul> <li>Job Application Package Checklist </li><li>Duty Statement </li></ul> <p>Position Details</p> <p>Job Code #:</p> <p>JC-477367</p> <p>Position #(s):</p> <p>695-401-7500-206</p> <p>Working Title:</p> <p>Deputy Chief Information Security Officer</p> <p>Classification:</p> <p>C. E. A.</p> <p>$13,080.00 - $14,851.00 C</p> <p># of Positions:</p> <p>1</p> <p>Work Location:</p> <p>Sacramento County</p> <p>Telework:</p> <p>Hybrid</p> <p>Job Type:</p> <p>Career Executive Assignment - Non Tenured, Full Time</p> <p>Department Information</p> <p>The California Department of Technology (CDT) is the guardian of public data, a leader in information technology (IT) services and solutions and has broad responsibility and authority over all aspects of technology in California state government, including policy formation, interagency coordination, IT project oversight, information security, technology service delivery, and advocacy.</p> <p>As an industry leader, we are committed to partnering with state and local government and educational entities to deliver digital services, develop innovative and responsive solutions for business needs, and provide quality assurance for state government IT projects and services. Our success and legacy of service is reliant upon our highly talented, dedicated, and diverse workforce, for it is our individual cultural diversity, backgrounds, experiences, perspectives, and unique identities that spark our collaborative strength and innovative approach to serving the State of California.</p> <p>Department Website: http://cdt.ca.gov</p> <p>Special Requirements</p> <p>For a complete list of the required Knowledge & Required Abilities see our customized Examination Bulletin that is attached to the Duty Statement portion of this announcement.</p> <p>Must pass fingerprint background check completed by the Department of Justice (DOJ) and Federal Bureau of Investigation (FBI) as a condition of employment.</p> <p>Application Instructions</p> <p>Completed applications and all required documents must be received or postmarked by the Final Filing Date in order to be considered. Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application.</p> <p>Final Filing Date: 5/22/2025</p> <p>Who May Apply</p> <p>Individuals who are eligible to be appointed to this Career Executive Assignment (CEA) by the State of California.</p> <p>How To Apply</p> <p>Complete Application Packages (including your Examination/Employment Application (STD 678) and applicable or required documents) must be submitted to apply for this Job Posting. Application Packages may be submitted electronically through your CalCareer Account at www.CalCareers.ca.gov. When submitting your application in hard copy, a completed copy of the Application Package listing must be included. If you choose to not apply electronically, a hard copy application package may be submitted through an alternative method listed below:</p> <p>Address for Mailing Application Packages</p> <p>You may submit your application and any applicable or required documents to:</p> <p>Department of Technology</p> <p>Human Resources</p> <p>Attn: Teresa Cuellar Job Control #477367</p> <p>Selection Services Unit</p> <p>P.O. Box 1810</p> <p>Rancho Cordova, CA 95741</p> <p>Address for Drop-Off Application Packages</p> <p>You may drop off your application and any applicable or required documents at:</p> <p>Department of Technology</p> <p>Drop Off 2nd Floor Security</p> <p>Human Resources</p> <p>10860 Gold Center Drive</p> <p>Rancho Cordova, CA 95670</p> <p>Teresa Cuellar Job Control #477367</p> <p>08:00 AM - 05:00 PM</p> <p>Required Application Package Documents</p> <p>The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:</p> <ul> <li>Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position. </li><li>Resume is required and must be included. </li><li>Statement of Qualifications - </li></ul> <p>A Statement of Qualifications (SOQ) is REQUIRED and must be submitted with your application to be considered for this position. Please see the area of this bulletin titled STATEMENT OF QUALIFICATIONS for specific instructions and the 5 categories that must be addressed.</p> <p>Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.</p> <p>Examination Qualification Requirements</p> <p>All applicants must possess the knowledge and abilities, and any other requirements, described in this announcement.</p> <p>Note: Eligibility to take a CEA examination does not require current permanent status in the civil service.</p> <p>Minimum Qualifications</p> <p>CEA examinations are open to all applicants who possess the knowledge and abilities, and any other requirements as described in the examination bulletin. Eligibility to take a CEA examination does not require current permanent status in civil service. Applicants must possess the ability to perform high administrative and policy-influencing functions effectively.</p> <p>General Qualifications</p> <p>State civil service employees must possess essential general qualifications including integrity, initiative, dependability, good judgment, and ability to work cooperatively with others.</p> <p>Knowledge and Abilities</p> <p>Applicants must demonstrate the ability to perform high administrative and policy - influencing functions effectively. Such overall ability requires possession of most of the following more specific knowledge and abilities:</p> <ol> <li> <p>Knowledge of the organization and functions of California State Government including the organization and practices of the Legislature and the Executive Branch; knowledge of principles, practices, and trends of public administration, organization, and management; knowledge of the techniques of organizing and motivating groups; knowledge of program development and evaluation; knowledge of facilitation and negotiation techniques to promote collaboration amongst diverse groups; knowledge of the methods of administrative problem solving; knowledge of the principles and practices of policy formulation and development and personnel management techniques; knowledge of the Department's Equal Employment Opportunity Program objectives and a manager's role in the Equal Employment Opportunity Program; knowledge of Information Technology Best Practices including trends, and directions related to hardware, system, and software, development and services; knowledge of or excitement to learn about site and technology system reliability operations best practices; knowledge of or excitement to develop, test, and improve creative ways to stress test existing government services to assess their performance and opportunities to improve.</p> </li><li> <p>Ability to plan, organize, and direct the work of multidisciplinary professional and administrative staff; ability to analyze administrative policies, organization, procedures, and practices; ability to integrate the activities of a diverse programs to attain common goals; ability to gain the confidence and support of top-level administrators and advise them on a wide range of administrative matters; ability to develop cooperative working relations with representatives of all levels of government, the public, and the Legislative and Executive Branches; ability to analyze complex problems and recommend an effective course of action; and prepare and review reports; ability to effectively contribute to the Department's Equal Employment Opportunity objectives. ability to effectively prioritize the tangible issues that matter (i.e., 80/20); ability to scope complex work in environments of uncertainty, including identifying and forming teams with the necessary skillsets; ability to lead interdisciplinary teams, including operations experts and technical team members; ability to distill complex and technical topics into insights and recommendations explicable to non- technical audiences, including presentations to stakeholders; ability to build systems and processes to scale a new technical operations program; ability to develop a compelling and tangible vision to inspire a team and stakeholders around a new idea.</p> </li></ol> <p>These knowledge and abilities are expected to be obtained from the following kinds of experience with substantial participation in the formulation, operation and/or evaluation of program policies (experience may have been paid or volunteer; in State service, other government settings, or in a private organization):</p> <p>CEA Level A - Responsible for broad administrative and program activities, including the execution and/or evaluation of program policies.</p> <p>CEA Level B - Responsible for extensive managerial and program administration or broad program manager experience with substantial participation in the formulation, operation, and/or evaluation of program policies.</p> <p>CEA Level C - Responsible for extensive highly professional influence and contributes to program, policy, and the methods to provide professional services needed to set policies, to meet the mission of the State department and often exercising technical and or professional skills that are required at this level.</p> <p>Desirable Qualifications</p> <p>In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:</p> <ul> <li>Industry cybersecurity certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Global Information Assurance Certification (GIAC) Security Leadership Certification (GSLC), or other information security and/or leadership accreditations such as completion of the California IT Leadership Academy program. </li><li>Demonstrated experience leading or coordinating multi-agency cybersecurity collaboration, such as managing joint incident response efforts (e.g., major ransomware events), establishing memorandums of understanding (MOUs), or developing joint threat sharing protocols across departments, state agencies, and/or local/federal partners. </li><li>Proven leadership in managing or modernizing a 24/7 Security Operations Center (SOC), including implementing threat intelligence platforms, managing escalated incident response processes, and integrating playbooks for high-severity events. </li><li>Demonstrated leadership in developing cybersecurity talent pipelines, including mentorship programs, apprenticeship pathways, succession plans, or internal skill-building initiatives for security staff across departments. </li><li>Experience supporting or leading statewide emergency coordination efforts related to cyberattacks, including coordination with the California Office of Emergency Services, National Guard, local jurisdictions, or federal entities such as CISA or FBI. </li><li>Familiarity with integrating cybersecurity efforts across physical, operational, and information security domains within critical infrastructure or essential government services. </li><li>Experience establishing and reporting on performance metrics for cybersecurity maturity, including KPIs for SOC efficiency, risk reduction outcomes, vulnerability management closure rates, or policy adoption across departments. </li><li>History of serving as a trusted advisor to senior leadership across multiple departments or in a federated environment, providing actionable guidance on security posture improvement, strategic investment, or emerging threat response. </li><li>Extensive experience in security management, legislation and policy-making. </li><li>Knowledge of organization and functions of California State government, including the organization and practices of Control Agencies, Legislature and the Executive Branch. </li><li>Ability to communicate effectively with others as demonstrated by strong written and verbal communication skills, strong negotiating skills, and particularly the ability to represent the California Department of Technology effectively with the Administration, control agencies, Legislature, key customers, stakeholders and internal staff. </li><li>Experience in obtaining buy-in and providing leadership to a large group of multi-disciplinary team members that do not report directly to the incumbent. </li><li>Knowledge of the structure, organization and function of a variety of technology disciplines, as well as local, State and federal initiatives and programs. </li><li>Ability to anticipate and manage complex information security issues affecting many organizations, including the ability to develop policy and integrate all aspects of a strategy to assure resolution of issues. </li><li>Must pass a fingerprint background check completed by the Department of Justice (DOJ) and Federal Bureau of Investigation (FBI) as a condition of employment. </li><li>Must be eligible to undergo a federal clearance. </li></ul> <p>Examination Information</p> <p>If you meet the requirements stated in this announcement, you may take this competitive examination. Possession of the Examination Qualifications requirements does not assure a place on the eligible list. Your performance in the examination will be compared with the performance of others who take this examination, and all successful candidates will be ranked according to their scores.</p> <p>A minimum rating of 70% must be attained in the Examination to obtain list eligibility for this position. All candidates will receive written notification of their examination results.</p> <p>The results of this examination will only be used to fill this position. Applications will be retained for twelve months.</p> <p>Hiring interviews for the Job may be conducted with the most qualified candidates.</p> <p>The examining Department reserves the right to revise the examination plan to better meet the needs of the service, if the circumstances under which this examination was planned change. Such revision will be in accordance with civil service law and rules and all competitors will be notified.</p> <p>Special Testing Arrangements</p> <p>If you have a disability and need special testing arrangements, answer the Reasonable Accommodations question appropriately on your Application (STD 678). You will be contacted to make specific arrangements. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this announcement.</p> <p>Benefits</p> <p>Benefit information can be found on the CalHR website and the CalPERS website.</p> <p>Contact Information</p> <p>The Human Resources Contact is available to answer questions regarding the position or application process.</p> <p>Department Website: http://cdt.ca.gov</p> <p>Human Resources Contact:</p> <p>Teresa Cuellar</p> <p>(916) 898-0284</p> <p>Teresa.Cuellar@state.ca.gov</p> <p>Please direct requests for Reasonable Accommodations to the interview scheduler at the time the interview is being scheduled. You may direct any additional questions regarding Reasonable Accommodations or Equal Employment Opportunity for this position(s) to the Department's EEO Office.</p> <p>EEO Contact:</p> <p>Lisa Cooper</p> <p>(916) 926-7657</p> <p>Lisa.Cooper@state.ca.gov</p> <p>California Relay Service: 1-800-735-2929 (TTY), 1-800-735-2922 (Voice) TTY is a Telecommunications Device for the Deaf, and is reachable only from phones equipped with a TTY Device.</p> <p>STATEMENT OF QUALIFICATIONS</p> <p>FILING INSTRUCTIONS</p> <ul> <li>A Standard original State application (version 12/2021) (Form 678) is required to apply for this examination and hiring selection. </li><li>A Statement of Qualifications (SOQ) must discuss how your education, training, experience qualifies you for this position. The SOQ must be no more than five pages in length, 12 pt. Arial font, 1 (one) inch margins, and must address each of the statements listed below. Please sure to number your responses for each question. </li></ul> <p>Artificial Intelligence (AI) tools can be useful in the development of written responses; however, it is important to use these tools responsibly and ethically. Where assistive tools may be used, responses within the SOQ should be your own original work. Applicants must write in their own words and avoid plagiarism. Failure to comply may be cuase for disqualification.</p> <p>Each candidate's Statement of Qualifications must clearly and concisely identify experience in the following 5 categories and be formatted in the same manner as shown below:</p> <p>CATEGORIES TO ADDRESS ON SOQ</p> <ol> <li>Policy Experience </li></ol> <ul> <li>Describe the type of Policy Experience you possess and how that experience will further the objectives and goals of the Office of Information Security. </li></ul> <ol start="2"> <li>Strategic Planning Experience </li></ol> <ul> <li>Describe the type of Strategic Planning initiatives you have developed or implemented and your primary role and responsibility at that time. This experience does not have to be cybersecurity related and can include things such as organizational or operational planning and implementation experience. </li></ul> <ol start="3"> <li>Organizing Change Management </li></ol> <ul> <li>Describe your experience in addressing Organizational Change and what techniques you used. </li></ul> <ol start="4"> <li>Information Security Expertise </li></ol> <ul> <li>Describe the Information Security Expertise you possess that demonstrates you are the most qualified candidate to serve as the California Department of Technology Deputy State CISO. In addition, please identify two key accomplishments within the last 12 months. </li></ul> <ol start="5"> <li>Cross-Functional Cybersecurity Leadership Qualities </li></ol> <ul> <li>Describe your experience in Risk Based Decision making, Team Development and Mentorship, Cross-Functional Collaboration, Crises Management and Resilience, and Innovation Orientation. </li></ul> <p>Note: A resume does not service as a Statement of Qualifications.</p> <p>Candidates who do not follow the filing instructions will be disqualified from the examination.</p> <p>Equal Opportunity Employer</p> <p>The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.</p> <p>It is an objective of the State of California to achieve a drug-free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.</p>