[vox-jobs] Information Sytems Manager (3DP002) - Information Security Officer (fwd)

Ken Herron vox-jobs@lists.lugod.org
Wed, 30 Apr 2003 13:57:06 -0700


---------- Forwarded Message ----------
Date: Tuesday, April 29, 2003 18:48:31 +0000
From: lynn.snow@legislativecounsel.ca.gov
To: securityjobs@securityfocus.com
Subject: Information Sytems Manager (3DP002) - Information Security 
Officer


The Legislative Counsel Bureau of California has the following opening in
its Legislative Data Center.  The Legislative Counsel Bureau is a small
civil service department whose mission is to provide legal services and
information technology services to the California State Legislature.
Bureau employees are excluded from collective bargaining and, therefore,
receive enhanced benefits.

POSITION:  INFORMATION SYSTEMS MANAGER (3DP002)

JOB LOCATION:  SACRAMENTO, CALIFORNIA					
SALARY:  $6,032 - $6,651
FINAL FILING DATE:  MAY 23, 2003

DUTIES AND RESPONSIBILITIES:  Under the direction of the Director and
Chief Deputy Director of the LDC, the Information Security Officer acts
as  the manager of LDC Information Security Office.  The manager plans,
organizes and directs all activities associated with the information
security and operational recovery program to support the business
functions of the California State Legislature and Legislative Support
Organizations.  The LDC’s information security and operational
recovery  program is mission critical to the Legislature, where the
consequence of  error is greatest.  Consults with high-ranking members of
both houses and  Legislative support organizations to ensure program
budgets and program  plans are understood and are consistent with the
business objectives of  the Legislature.  Makes management presentations
to high-ranking officials  and visiting dignitaries from other Executive
Branch agencies, other State  Legislatures, and countries.  Participates
as a member of the LDC’s  management team in the development of
information security policies and  other Data Center policies.  The
manager’s responsibilities have extreme  impact on the business
success of the Data Center.

Who May Apply:  Applicants need not be a current or former State employee
nor be on a State exam list to apply, but need to meet the Minimum
Qualifications listed below.  Since LDC is under a demonstration project
for civil service hiring practices, candidates do not have to be on a
State list in order to apply.  LDC may use this selection process for up
to one year to fill other vacancies, where job-related knowledge, skills,
abilities and behaviors are the same or substantially similar to this
advertised position.  Applications will be screened and interviews
scheduled for those candidates possessing the best qualifications and
experience.  Subject to SROA/Surplus.

HOW TO APPLY:  Submit a standard state application and a resume to the
Legislative Counsel Bureau Personnel Office, Attn: L. Snow, 925 L Street,
Suite 900, Sacramento CA, 95814.  Applications must be received in the
Personnel Office by 5:00 p.m., Friday, May 23, 2003, or be postmarked by
this date.  Please include 3DP002 after the position title on your
application and note how you heard about this position.  Technical
questions may be directed to Tracy Fong at (916) 445-4965.  Questions
regarding how to apply may be directed to Personnel at (916) 341-8330.

MINIMUM QUALIFICATIONS:  A minimum of five (5) years of experience as a
security administrator, IT auditor, or network administrator, one (1)
year  of which shall have been in a managerial capacity as an Information
Security Officer.  Must have current professional certification through
the Information Security Certification Program of the International
Information Systems Security Certification Consortium (ISC)2 Institute as
CISSP (Certified Information Systems Security Professional), SSCP
(Systems  Security Certified Practitioner) or through the SANS
Institute’s Global  Information Assurance Certification (GIAC)
Program (copy of certificate  requested with application/resume).
Knowledge of information technology  security trends, principles,
policies, practices, protocols, and  procedures sufficient to advise
customers and staff in their use.   Knowledge of network security methods
such as encryption, firewalls, and  virus scanners.  Knowledge of modern
computer forensic policies, methods,  and techniques.  Knowledge of
physical security methods and techniques as  applied to information and
information systems.  Knowledge of information  systems change control
process and procedures as related to information  security.  Knowledge of
hardware and software involved in the design,  operation and maintenance
of a network.  Knowledge of management processes  and techniques related
to Business Continuity Planning and Operational  Recovery Planning.
Knowledge of principles, practices, and trends in  public administration,
including management, organization, planning,  cost/benefit analysis,
budgeting, and project management and evaluation.   Ability to balance
business needs with security controls to mitigate  risk.  Ability to act
as an "expert witness" on matters related to  information security.
Ability to work effectively under stress within  defined timeframes
and/or in a state of emergency.  Ability to demonstrate  a high level of
integrity and sound judgment concerning privacy issues.   Good oral and
written communication skills, including making effective  presentations,
to effectively communicate with management, staff,  customers,
contractors and vendors.  Highly skilled in planning,  organizing,
directing and controlling to effectively utilize staff  resources in
completing work assignments and projects.  Ability to think  tactically
and strategically to provide information technology solutions  and
services that meet the customers’ needs and fit into the IT
architecture of the Data Center.  Ability to work and get along with
others, including customers, team members and peers, and managers to
produce the assigned work products by due dates.  Ability to create a
service culture among organizational entities and staff to provide a high
level of service to customers.  Ability to establish good working
relationships with other managers, customers, and vendors that culminates
in successfully meeting customers’ expectations of products and
services.

DESIRABLE QUALIFICATIONS:  Knowledge of State and Federal laws and
regulations concerning the proper acquisition, use, storage of
intellectual property and data, as well as information security.
Knowledge of state employee supervision, workforce development and
training, personnel management, and safety and health policies.
Knowledge  of the Legislative environment and the related business
processes.   Knowledge of the LDC’s customers’ business and
information technology  needs to determine how the IT architecture of the
Data Center can be  utilized to service their needs.

SELECTION INFORMATION:
The Legislative Counsel Bureau is an equal opportunity employer to all
regardless of race, color, creed, ancestry, sex, marital status,
disability, religious or political affiliation, age, or sexual
orientation.

It is an objective of the State of California to achieve a drug-free
workplace.  Any applicant for State employment will be expected to behave
in accordance with this objective because the use of illegal drugs is
inconsistent with the law of the State, the rules governing civil
service,  and the special trust placed in public servants.

OTHER RELATED INFORMATION
The Legislative Counsel Bureau reserves the right to revise the
examination plan to better meet the needs of the service if the
circumstances under which this examination was planned change.  Such
revision will be in accordance with civil service law and rules and all
competitors will be notified.

At the conclusion of a selection process, administered under the LCB
demonstration project, the LCB reserves the right to establish a pool of
eligibles comprised of the most qualified candidates who competed in the
process.  This pool may be used to fill subsequent vacancies which
require  substantially similar knowledge, skills, abilities and
behaviors.  Such  pools can be used for a period not to exceed one year
from the final  filing date of the original selection process.

Applications are available at State Personnel Board Offices, local
offices  of the Employment Development Department and the Legislative
Counsel  Bureau Personnel Office.  The application form (Std. 678) is
also  available in several formats on the State Personnel Board's website
at:   http://www.spb.ca.gov/jobsrd.cfm

THIS IS A COMPETITIVE PROCESS.  If you meet the minimum qualifications
stated on this bulletin, you may file for this position.  Possession of
these qualifications does not guarantee inclusion in the selection
process.  Your performance in the selection process will be compared with
the performance of all others who participate in this process, and does
not guarantee an appointment to the position.

Interview Scope:  If an interview is conducted, in addition to the
minimum  and desirable qualifications described on this bulletin, the
panel will  consider education, experience, personal development,
personal traits, and  fitness.  In appraising experience, more weight
will be given to the  breadth and recency of pertinent experience and
evidence of the  candidate’s ability to accept and fulfill
increasing responsibilities than  to the length of experience.
Evaluation of a candidate’s personal  development will include
consideration of a recognition of training needs;  plans for
self-development; and the progress made in efforts toward self-
development.

---------- End Forwarded Message ----------

-- 
Kenneth Herron  Kherron@newsguy.com     916-366-7338