Security Governance & Assurance (SGA) Lead

How did you hear about this opportunity? Tell us in this brief survey.

Here is the link to the Information Technology Specialist II examination bulletin.

Here is the link to the Information Technology Specialist II (LEAP) examination bulletin.

"Discover what makes CDTFA an employer of choice by exploring a video of our vibrant campus!"

California not only needs you; it wants you as part of the growing workforce. The California Department of Tax and Fee Administration (CDTFA) makes life better for Californians by fairly and efficiently collecting the revenue that supports our essential public services, with CDTFA administered programs accounting for about twenty-three (23%) percent of all state revenue. Tax programs administered by the CDTFA are concentrated in two general areas – sales and use tax, and special taxes and fees. New employees, new ideas, and new creative perspectives are needed in all areas at CDTFA.  CDTFA offers employees reliable income, stable benefits, work-life balance, paid holidays, advancement opportunities, and the personal fulfillment of knowing that your work is personally impacting the lives of others.

• This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.; for more information about E-Verify, please go to www.dhs.gov/e-verify

• Position requires employee to be fingerprinted and successfully pass a background investigation. 

Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application.

Who May Apply

How To Apply

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Other - A completed Supplemental Questionnaire (SQ) must be submitted with your STD. 678 in order to be considered for this position. Please see the Supplemental Questionnaire Requirement section of this job posting for additional information.
  

• Knowledge managing and leading an enterprise risk register, conducting technical risk assessments and tracking remediation of risks via a Plan of Action and Milestones (POAM).

• Experience performing System Security Plans (SSPs), Privacy Threshold Assessments (PTAs) and Privacy Impact Assessments (PIAs).

• Experience with managing or leading an enterprise privacy program. 

• Strong foundational knowledge of network architecture, system administration, software development and secure system and application design.

• Extensive knowledge of Information Security Policies, Standards, Procedures and Guidelines.

• Experience with cyber security tools and IT administration tools.

• Experience and working knowledge with National Institute of Standards and Technology (NIST), IRS Publication 1075, State Administrative Manual (SAM), and the Statewide Information Management Manual (SIMM).

• Experience managing and leading large Information Technology (IT) projects.

• Ability to analyze issues, define opportunities, and recommend effective solutions.

• Ability to develop and maintain strong working relationships, and deliver excellent customer service.

• Ability to work collaboratively with multi-disciplined work groups.

• Ability to multi-task and work under pressure.

• Outstanding written skills for preparing reports and briefings for audience at all levels of organization.

• Outstanding analytical and problem-solving abilities, prioritization and time management skills.

• Experience leading, mentoring and developing a team while fostering a culture of accountability and continuous improvement.

• Ability to align technical, governance and compliance initiatives with organizational goals and drive continuous improvement and program maturity.

• Certified Information Systems Security Professional (CISSP), CRISC (Certified in Risk and Information Systems Control) and Certified Information Security Manager (CISM) certifications are a plus.

• Experience in managing a vulnerability management program and prioritizing remediation based on risk.

• Experience in utilizing vulnerability management platforms such as Rapid7 Insight VM and Tenable Nessus.

• Experience managing and leading incident response activities related to security and privacy incidents.

Please direct requests for Reasonable Accommodations to the interview scheduler at the time the interview is being scheduled. You may direct any additional questions regarding Reasonable Accommodations or Equal Employment Opportunity for this position(s) to the Department's EEO Office.