Cybersecurity Solutions Manager

Working Conditions

Minimum Requirements

• INFORMATION TECHNOLOGY MANAGER I

Additional Documents

Special Requirements

• DMV Pull Program : Participation in the DMV Pull Program is required. The position(s) require(s) a valid Driver’s License (DL). You must answer the questions addressing your DL on your application. Ensure you provide your DL number, class, expiration date, and any endorsements and/or restrictions.
• Conflict of Interest : This position is designated under the Conflict-of-Interest Code and is required to complete Form 700 within 30 days of appointment. Failure to comply with the Conflict-of-Interest Code requirements may void the appointment.

Application Package Requirements

• To have your application considered for this job opportunity:
• List the Job Code and Position Number for this position in the “EXAMINATION(S) OR JOB TITLE(S) FOR WHICH YOU ARE APPLYING” section on the State Application, STD. 678.
• List your most current employment history first in the “EMPLOYMENT HISTORY” section on the STD. 678.
• Provide the “From” and “To” dates with the month, day and year, the “Hours Per Week” that you worked and the Total Worked (Years/Months). You may include overtime hours.
• You must complete the “DUTIES PERFORMED” on the State Application (do not note “see attached resume” in this section). Failure to comply and your application is considered incomplete.
• SROA and Surplus are encouraged to apply and must submit a copy of their letter.
• Please note consideration shall be given to work experience gained in a part-time or full-time job, regardless of whether the job was a paid or a volunteer position or was within, or outside of, state service.
• If using education to qualify please submit a copy of your transcripts. If selected, official transcripts will be required. Foreign education must obtain and submit verification of United States course/degree equivalency.
• NOTE: Incomplete applications received may not be considered. Resumes are welcomed but do not take the place of the completed State Application STD 678. Applications received via fax or email will NOT be accepted. If you would like confirmation of receipt, please send certified mail.

Application Instructions

• Completed applications and all required documents must be received or postmarked by the Final Filing Date in order to be considered. Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application.
• Who May Apply
• How To Apply
• Address for Mailing Application Packages
• You may submit your application and any applicable or required documents to:
• Address for Drop-Off Application Packages
• You may drop off your application and any applicable or required documents at:
• Required Application Package Documents
• The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:
• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications - Please refer to the Statement of Qualifications (SOQ) section at the bottom of this job bulletin for the filing instructions and the SOQ Question(s). Applications submitted without the SOQ may not be considered.

Desirable Qualifications

• CompTIA Security+, GIAC Security Essentials, or similar certification.
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of project management frameworks and best practices.
• Knowledge of cybersecurity and privacy principles.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Knowledge of information technology supply chain security and supply chain risk management policies, requirements, and procedures.
• Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.
• Knowledge of Import/Export Regulations related to cryptography and other security technologies.
• Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).
• Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
• Skill in identifying measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.
• Skill in executing the system development life cycle (SDLC) management principles, including software security and usability.
• Skill in developing and applying security system access controls.
• Skill in discerning the protection needs (e.g., security controls) of information systems and networks.
• Skill in evaluating the adequacy of security designs.
• Skill in writing code in a currently supported programming language (e.g., Java, C++).
• Skill in conducting audits or reviews of technical systems.
• Skill in network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Skill in integrating and applying policies that meet system security objectives.
• Skill in creating policies that enable systems to meet performance objectives (e.g., traffic routing, SLA's, CPU specifications).
• Skill in the use of design modeling (e.g., unified modeling language).
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to ensure information system security, acquisition personnel, legal counsel, and other appropriate advisors and stakeholders are participating in decision making from system concept definition/review and are involved in, or approve of, each milestone decision through the entire system life cycle for systems.
• Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.

Benefits

• Cal OES employees are eligible for a number of benefits and working for us is a great opportunity to join a committed team. Benefits include but are not limited to the following:
• Free Parking
• On-site Gym and Locker room
• Electric Carport
• Excellent CalPERS state pension plan
• 401(k) and 457(b) Plans
• Flexible Schedules
• Generous paid time off
• Health, dental & vision insurance for the employee or the employee's family
• Investment in careers development
• Located near many local eateries, financial institutions, and the Light Rail Station
• Benefit information can be found on the CalHR website and the CalPERS website.

Contact Information

Statement of Qualifications

• All applicants must provide a Statement of Qualifications (SOQ) for the hiring manager’s review. Failure to include an SOQ will disqualify an applicant from consideration. Your SOQ will be a determining factor of your qualifications for this position. If your qualifications are competitive, you will proceed to the hiring interview.
• A resume in lieu of the SOQ responses will disqualify an applicant from consideration. A standard or generic SOQ will also disqualify an applicant from consideration.
• Please review the Duty Statement for the position.
• The SOQ should be no more than one page, formatted in 12-point Arial font with one-inch margins, and include the applicant's name in upper right corner of page.
• Please respond to the following prompt, providing detailed examples and explanations where appropriate.
• Describe a specific situation where you were accountable for the work of technical staff you did not formally supervise. What actions did you take when someone was underperforming, and how did you work around the authority you lacked?
• Looking for guidance on navigating the state's job board or need assistance with uploading your documents or SOQ? Check out helpful how-to videos here: Work4CA: How to Get a State Job Series - YouTube to make your job search easier and more effective!

Examination Information

Equal Opportunity Employer