Job Description

Chief Information Security Officer (0933 Manager V) - Department of Public Health

1 day ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

About

The Department of Public Health prioritizes equitable and inclusive access to quality healthcare for its community and values the importance of diversity in its workforce. All employees at the Department of Public Health work to advance equity, inclusion, and diversity with a specific lens and focus on race, ethnicity, gender, sex, sexuality, disability, and immigration status.

Job Details

• Application Opening: Friday, November 21, 2025
• Application Deadline: Application filing will close on or after Wednesday, December 10, 2025.
• Salary: $180,440 - $230,308 Annually (Range A)
• Appointment Type: Permanent Civil Service
• Recruitment ID: PBT-0933-160818
• Seniority level: Executive
• Employment type: Full-time
• Job function: Information Technology
• Industries: Hospitals and Health Care

Role Description

The Chief Information Security Officer (0933 Manager V) is responsible for developing and delivering a comprehensive information security strategy and framework to optimize the security posture of the organization. The role leads the design and execution of a security program that promotes cross-functional collaboration, supports effective governance, advises senior leadership on security priorities and resource allocation, and establishes policies to manage information security risks. The Chief Information Security Officer reports directly to the Chief Information Officer (CIO) and oversees a team of twelve security professionals.

Essential Job Functions

• Provides leadership, direction, and prioritization in assessing and evaluating information security risks across the organization, advising and consulting with executives on identified risks and ensuring the execution of mitigation and remediation steps.
• Oversees strategic planning and execution across the information security portfolio, including incident response, policy frameworks, compliance, threat management, and targeted training, with specialized triaging for high-risk areas.
• Manages capital and operating budgets and provides Return on Investment (ROI) analyses and IT budget recommendations.
• Collaborates with the Office of Compliance and Privacy Affairs to evaluate data security risks associated with departmental initiatives and design effective mitigation tools and strategies.
• Analyzes security requirements and ensures enterprise and product compliance with industry standards, including HIPAA, HITRUST, ISO 27001, NIST, PCI-DSS, and other security standards. Drives cross-functional collaboration with internal teams and senior leaders to ensure timely execution of testing and auditing activities, securing certification and maintaining organizational compliance.
• Ensures alignment of security strategies with organizational goals, addressing stakeholder priorities and advising leadership on developments influencing the success of information security initiatives.
• Develops, implements, and maintains policies and procedures to ensure effective security program operations.
• Represents DPH in security-related matters with City partners, internal and external stakeholders, and industry groups.

The Chief Information Security Officer (0933 Manager V) may perform other duties as assigned/required.

How To Qualify

• Education: Bachelors degree from an accredited college or university; AND
• Experience: Five (5) years of professional healthcare information systems security experience, of which three (3) years must include supervising IT professionals.

Education Substitution: Additional experience as described above may be substituted for the required degree on a year-for-year basis. One (1) year is equivalent to thirty (30) semester units / forty-five (45) quarter units.

Applicants must meet the minimum qualification requirements by the final filing date unless otherwise noted.

Desirable Qualifications

• Possession of a Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) certification.

Verification Of Education And Experience

Every application is reviewed to ensure that you meet the minimum qualifications as listed in the job ad. Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process. If education verification is required, information on how to verify education requirements, including verifying foreign education credits or degree equivalency, can be found at

Note

Falsifying ones education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.

Selection Procedures

After application submission, candidates deemed qualified must complete all subsequent steps to advance in this selection process, which includes the following:

Supplemental Questionnaire (SQ) Examination (Weight: 100%)

• Candidates that meet the minimum qualifications will be invited to participate in a Supplemental Questionnaire (SQ) examination that is designed to measure the knowledge, skills, and abilities in job related areas which may include but not be limited to: knowledge of local, State and Federals laws and regulations relating to information security, including but not limited to HIPAA and HITECH; knowledge of information security technology frameworks and standards, including but not limited to NIST, HITRUST, COBIT, ISO 27001, PCI-DSS, or similar cyber security frameworks; knowledge of technology relating to enterprise wide information security protection; ability to manage, supervise, train and coordinate complex functional area of responsibility and groups of employees; ability to analyze and report on activities, issues and problems and recommend appropriate solutions.

Candidates must achieve a passing score on the Supplemental Questionnaire exam in order to continue in the selection process and will be placed on the confidential eligible list in rank order according to their final score.

Additional selection processes may be conducted by the hiring department prior to making final hiring decisions.

Terms Of Announcement And Appeal Rights

Applicants must be guided solely by the provisions of this announcement, including requirements, time periods and other particulars, except when superseded by federal, state or local laws, rules, or regulations. Clerical errors may be corrected by posting the correction on the Department of Human Resources website at . The terms of this announcement may be appealed under Civil Service Rule 111A.35.1. Appeals must include a written statement of the item(s) being contested and the specific reason(s) why the cited item(s) constitute(s) abuse of discretion by the Human Resources Director. Appeals must be submitted directly to the Executive Officer of the Civil Service Commission within five business days of the announcement issuance date.

Additional Information Regarding Employment with the City and County of San Francisco

• Information about the Hiring Process
• Conviction History
• Employee Benefits Overview
• Equal Employment Opportunity
• Disaster Service Workers
• ADA Accommodation
• Right to Work
• Copies of Application Documents
• Diversity Statement
• Veterans Preference
• Seniority Credit in Promotional Exams

Where to Apply

All job applications for the City and County of San Francisco must be submitted through our online portal. Please visit to begin your application process.

Applicants may be contacted by email about this recruitment. Please consider using a personal email address that you check regularly rather than a work or school account.

Computers are available for the public (9:00 a.m. to 4:00 p.m. Monday through Friday) to file online applications in the lobby of the Dept. of Human Resources at 1 South Van Ness Avenue, 4th Floor and at the City Career Center at City Hall , 1 Dr. Carlton B. Goodlett Place, Room 110.

Ensure your application information is accurate, as changes may not be possible after submission. Your first and last name must match your legal ID for verification, and preferred names can be included in parentheses. Use your personal email address, not a shared or work email, to avoid unfixable issues.

Applicants will receive a confirmation email from notification@smartrecruiters.com that their online application has been received in response to every announcement for which they file. Applicants should retain this confirmation email for their records. Failure to receive this email means that the online application was not submitted or received.

If you have any questions regarding this recruitment or application process, please contact the analyst, Marielle Saldajeno at marielle.saldajeno@sfdph.org or (628) 271-6820.

The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic informati]]> <

Job Tags

Similar Jobs