State Teachers' Retirement System

Chief Information Security Officer job at State Teachers' Retirement System. Yolo County, CA.

Job Description and Duties

A resume and statement of qualifications is required.

The California State Teachers’ Retirement System is seeking to fill its Chief Information Security Officer position. Under the general direction of the General Counsel, the Chief Information Security Officer (CISO) provides leadership, management direction and policy guidance to CalSTRS Information Security Office. The incumbent plans, organizes and directs activities associated with the following enterprise-wide information security programs: Defense & Monitoring, Audits & eDiscovery, Governance & Compliance, Security Awareness, Architecture & Data, and Investigations & Response. The CISO develops, implements, and maintains enterprise policies, standards, procedures, and guidelines for information security management to ensure the security, confidentiality, integrity, availability, and privacy of CalSTRS information assets. The incumbent serves as an expert policy advisor to the Chief Executive Officer (CEO), Executive Staff, the Teachers’ Retirement Board (TRB) and its Audits & Risk Management (ARM) Committee related to these responsibilities.

This position is eligible for an annual incentive recognition opportunity of up to 15 percent of annual base salary. Relocation benefits may be available.

Telework Information: CalSTRS offers a hybrid approach including in-office and remote work solutions with staff working on-site at our Headquarters in West Sacramento two days per week. To learn more about this opportunity, click here.

Special Requirements

Background Investigation

Prior to employment with CalSTRS, a background investigation (BI) will be conducted. The BI consists of a Personal History Statement and fingerprinting through the Department of Justice. The BI will check criminal and civil records and, if applicable, verify education, credit and check driving records. The position may be subject to the disclosure and disqualification requirements concerning economic conflict of interest in government work, pursuant to the CalSTRS Conflict of Interest Code and the Political Reform Act.

Desirable Qualifications

• Experience overseeing and managing an Information Security Office program.
• Senior leadership skills and ability to manage a diverse and broad range of staff.
• Ability to develop, implement and maintain enterprise policies, standards, procedures and guidelines.
• Ability to implement strategies that mitigate risks and align with organization objectives.
• Ability to manage monthly and annual reports and present to the board, staff, management and stakeholders.
• Demonstrated experience managing operating budgets and financial resources.
• Ability to anticipate industry shifts and identify innovative opportunities to enhance Information Security Office program performance.
• Ability to complete and oversee staff completion of regular training to maintain and sharpen necessary skills and institute and refine best practices to track current threats and trends and anticipate potential threats.
• Experience ensuring programs and policies meet requirements of authoritative and regulatory bodies.
• Strong communication skills to convey complex information security strategies and concepts clearly to stakeholders, including the board and executive staff.
• Demonstrated commitment to creating and sustaining a diverse, inclusive and equitable workplace.
• Demonstrated ability to engage with and respond to auditors.
• Strong interpersonal skills to build and maintain relationships in a highly visible role.
• Ability to maintain the organization’s reputation as a partner of choice.
• Commitment to ethical behavior and transparency in all decisions and interactions.

Benefits

Learn about all of the benefits of being a CalSTRS employee by visiting CalSTRS.com/Careers and clicking on the About Us tab.

Statement of Qualifications

In addition to the required documentation, a Statement of Qualification (SOQ) must be submitted with your application. The SOQ must specifically address your education and experience as it relates to each item below. The SOQ must not exceed four pages, single-sided and double-spaced with 12 point Arial font. Failure to follow this format and the "Application Instructions" above may result in disqualification.

The SOQ serves as the examination for this position. Please make sure your answers are as detailed as possible, including relevant examples and dates of employment.

1. Experience at the executive or senior leadership level overseeing information security. Including responsibilities for policy development, program administration, and knowledge of major information security policies, operational challenges, and systems used to safeguard information against internal and external threats.

2. Experience at the executive or senior leadership level developing and overseeing information security management systems and metrics to track progress, measure outcomes, and validate the effectiveness of cybersecurity initiatives and mitigation activities.

3. Experience at the executive or senior leadership level effectively communicating and presenting information to diverse audiences, such as boards, committees, executive management, or similar governing bodies. Including the ability to coordinate with legal professionals and external entities to achieve organizational goals.

4. Experience at the executive or senior leadership level leading information security initiatives that support organizational innovation while ensuring compliance with regulatory requirements and organization risk tolerance. Including ways you partner with others across an organization to navigate the challenges of implementing innovative, secure, compliant solutions in a rapidly changing environment.

Required Application Package Documents

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications – A Statement of Qualifications is required and must be included.