Information Technology Specialist I - Information Security Officer

The California State Lottery is looking to fill the exciting role of a

Information Technology Specialist I - Information Security Officer!

• We have a worthy mission that we’re sure you’ll take pride in too.
• Are an energetic, creative, and talented team
• Value diversity and inclusion in the workplace
• Empower team members to bring their knowledge, expertise, and innovation
• Recognize individual and team contributions
• Support the importance of work-life balance
• Invest in the professional development of our team members
• Are dedicated to preserving our environment by lowering our carbon footprint

The California Lottery is a multi-billion-dollar enterprise headquartered in Sacramento. It is one of the few state agencies that is a revenue generator, not accepting taxpayer dollars from the state’s general fund. Our mission is to provide supplemental funding to California schools while simultaneously supporting local communities. Ninety-five cents of every dollar spent by players goes back to local communities in the form of contributions to public schools and colleges, prizes and retailer compensation.

In fiscal year 2022-23, the California Lottery generated sales of approximately $9.2 billion with over $2.2 billion earned for California public schools. Lottery products are sold at more than 23,000 retail locations throughout the state. Product offerings include an average of 52 fun and entertaining Scratchers games and several draw games such as Powerball, Mega Millions, and Super Lotto Plus and daily games such as Fantasy 5 and Hot Spot.

Under the direction of the California State Lottery’s (Lottery) Information Security & Privacy Manager, the Information Technology Specialist I (ITS I) will assist the Information Security and Privacy Office (ISO) in its mission of ensuring the confidentiality, integrity, and availability of Lottery Information Assets. The duties for this position are focused on the Information Security Engineering domain; however, work may be assigned in other domains as needed.

This position requires a current Information Technology Specialist I exam.

This position is headquartered at the Sacramento HQ and is eligible for a hybrid telework schedule. Employees must be able to report to their assigned headquarters office as assigned. Travel expense to and from the assigned headquarters are the responsibility of the employee. Eligibility for telework requires the employee to reside in California per California Government Code Section 14200 which states: “telecommuting means the partial or total substitution of computers or telecommunication technologies, or both, for the commute to work by employees residing in California.”

Effective July 1, 2025, specific Bargaining Units and associated Excluded State employees are subject to a salary reduction between 2% - 4.62% in exchange for hours for Personal Leave hours each month. For more details, please visit the California Department of Human Resources (CalHR) website.

You will find additional information about the job in the Duty Statement.

• Schedule:
  
  8:00AM to 5:00PM PST (After hours may be needed to ensure the Information Security and Data Privacy duties for the California State Lottery)
• Minimal:
  On demand travel may be required to facilitate / participate in information security and privacy related audits.
• Other:
  The incumbent must maintain an expert level understanding of best practices related to Information Security and Privacy. The incumbent will work in a fast-paced environment with competing priorities, and mission critical deliverables.

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Expert level understanding of ISO 27001 and NIST 800-53 standards.
• Experience in developing and implementing information security awareness training advisories, notices, and campaigns.
• Experience in information security incident handling and response.
• Expertise in conducting risk assessments…