Information Security Specialist

Title:
Information Security Specialist
Location:
Sacramento, CA (Hybrid)

We are looking for an experienced Information Security Specialist to support enterprise risk, privacy, and cybersecurity programs. The role focuses on building and maintaining strong risk management practices, improving security governance, and supporting compliance across the organization.

• Develop and maintain Enterprise Risk Management (ERM) programs, including frameworks, governance structures, and alignment with organizational goals.
• Design and manage Insider Threat programs, including policies, monitoring approaches, and risk assessment processes.
• Define and track risk metrics, Key Risk Indicators (KRIs), and risk reporting to support leadership decision-making.
• Maintain enterprise risk registers and risk tracking systems to identify, assess, and monitor organizational risks.
• Perform qualitative and quantitative risk assessments using structured methodologies.
• Identify and manage risks related to sensitive and regulated information, including personal and confidential data.
• Support audit readiness activities by maintaining clear and accurate security documentation and evidence.
• Contribute to privacy, supply chain risk, and security policy development and implementation.
• Deliver training sessions and workshops to improve awareness and understanding of security and risk practices.

• Bachelor's degree in Information Technology, Engineering, or a related field, or equivalent experience.
• Hands‑on experience in information security, risk management, privacy, insider threat, or related areas.

• Experience building or managing Enterprise Risk Management programs.
• Experience developing and operating Insider Threat programs.
• Experience defining risk metrics, reporting structures, and risk appetite frameworks.
• Experience managing risk registers or enterprise risk tracking tools.
• Experience performing structured risk assessments using established methods.
• Experience supporting audits and compliance‑related documentation.
• Experience working with sensitive data protection and risk mitigation.
• Experience delivering training, workshops, or knowledge‑sharing sessions.

Infowave Systems is an equal opportunity employer that is committed to diversity and inclusion in the workplace.