Information Security Director jobs in Corona, CA

Click here to learn about the benefits of working for the County of Riverside 

The Riverside County Sheriff's Office is seeking an Information Security Analyst II to join the Technical Services Bureau.  The Information Security Analyst II performs the most complex tasks and assignments requiring vast technical knowledge working with minimal supervision.  Incumbents perform multiple tasks with high levels of responsibility and direct the work assignments of others.

Additionally, the Information Security Analyst II will respond to, analyze, and resolve departmental and enterprise security issues, concerns, questions, incidents, and events; evaluate and identify risks and threats; make resourceful, practical decisions and address unexpected problems; work with department in the development of information security standards and practices; and perform other related duties as required.

The Information Security Analyst II is the journey level classification in the Information Security Analyst (ISA) series and reports to the Chief Information Security Officer. Incumbents perform the full range of duties requiring a greater technical knowledge with little supervision or guidance. Incumbents are expected to understand the business needs of County departments and agencies, and coordinating security recommendations within those requirements. Incumbents have technical knowledge of both current technology and industry direction, and maintain the confidentiality of security concerns and investigations. 

The work of the ISA II is distinguished from the work of the ISA I in that the latter is the entry level in the series and requires minimal information security experience and knowledge. Advancement to the next level is obtained by competitive selection through an open recruitment.

The law enforcement professionals of the Riverside County Sheriff’s Office, with a staff of over 3,600 dedicated men and women, cover the expanse of over 7,300 square miles in southern California.  The Sheriff’s Office is dedicated to serving the citizens of its communities with integrity, professionalism, leadership, and loyalty and believes in service above self.

• Analyze systems design to ensure implementation of appropriate security policies.
 
• Evaluate security incidents, developing solutions and communicating results to management.
 
• Maintain a computer crime or incident scene, including recognition of the proper investigative approach, conducting a field of search to establish probable cause for seizure, proper collection methods, evidence preservation, transportation, computer forensic analysis, and case management.
 
• Analyze systems and access logs; complete analysis of evidentiary processes. 
 
• Assess in real time the impact of external actions on computer systems and networks and determine whether the County has been subjected to a system failure, a computer-related crime, or potentially hostile information warfare.
 
• Perform computer, network, and departmental security audits; respond to network and system intrusive activity and analyze network traffic and system logs to determine corrective action and implement countermeasures. 
 
• Coordinate implementation and modification of enterprise and departmental DMZ's.
 
• Respond to and assist in due diligence and audit requests; collaborate on security solutions with departments.
 
• Maintain global security policies, standards, guidelines, and procedures to ensure ongoing security compliance.
 
• Recommend security improvements; ensure that technology decisions made are compliant with Enterprise Security Architecture; analyze and maintain Emergency Operations Plans.
 
• Evaluate the security posture of computers and networks; perform vulnerability scans and penetration tests.

• Develop and maintain scripts, routines, and software to perform vulnerability threat assessments.
 
• Participate as a member of the security incident response team.
 
• Use various security tools and prepare reports on findings.
 
• Monitor and review intrusion detection systems and firewall logs, analyzing events and patterns; provide mitigation responses.
 
• Review firewall and router rules and access control lists; review and analyze system logs and access lists; perform design review and analysis; perform threat and risk analysis.
 
• Research technical and security topics and maintain information on industry trends.
 
• Develop and analyze information security models, maintaining methodology to track Security Plans for each sensitive and critical application and general support system within the organizations.

• Respond to and assess information security requests.

Education: Current valid certification established by the International Information Systems Security Certification Consortium, Inc., or (ISC)² as a Certified Information Systems Security Professional (CISSP). 
 
Experience: Four years in information security including extensive experience with and knowledge of Unix or Linux, and Microsoft operating systems. Military or law enforcement experience is desired.

Knowledge of: Industry-recognized information security framework (COBIT, PCI-DSS, ISO 17799/27001) and best practices; standard security practices; maintaining the chain-of-custody process and procedures; network security, architecture, routing, and TCP/IP protocols; Unix, Linux, and Microsoft operating systems; risk assessment and remediation process and practices; general business processes and standards associated with areas of assignment.

Ability to: Perform cyber attack trend analysis; project planning and management; manage the evidentiary process; conduct investigations and coordinate security anomalies and events; conduct independent systems analysis of complex business processes; interact with customers/vendors on the phone and in person; perform business continuity planning, documentation and evaluation; establish and maintain excellent customer service and relationships.

The County of Riverside is committed to providing reasonable accommodation to applicants as required by the Americans with Disabilities Act (ADA) and Fair Employment and Housing Act (FEHA). Qualified individuals with disabilities who need a reasonable accommodation during the application or selection process should contact the recruiter for the position noted above. For additional information and/or to obtain the appropriate form for requesting a reasonable accommodation, please visit the Disability Access Office web page located at: http://dao.rc-hr.com/.

GENERAL INFORMATION  

For specific questions regarding this position, contact Angela Tavaglione at atavaglione@rivco.org.