Information Technology Security Officer

Salary : $107,681.60 - $137,425.60 Annually

Location : Tenth Street Place - 1010 10th Street Modesto, CA

Job Type : Full Time

Job Number : 4312B

Department : Information Technology

Opening Date : 11 / 07 / 2025

Closing Date : 11 / 24 / 2025 5 : 00 PM Pacific

Bargaining Unit : MCMA

THE POSITION

Help keep the City of Modesto's technology safe and secure! We're looking for an experienced IT Security Officer to protect our network, systems, and data while leading efforts to implement new and innovative solutions. If you have a strong background in network administration, system security, and tech implementation-and a degree in computer science, business information systems, or a related field-we want to hear from you!

Upcoming Salary Increases and Incentives :

110,869 - $134,677 effective 7 / 1 / 2026

2.5% Education Incentive - Bachelor's Degree

5% Education Incentive - Master's Degree

The Information Technology Security Officer is responsible for overseeing, monitoring, implementing, and supporting information system security for the City to protect the integrity of the City's networks, systems, applications, and data; for managing the design and implementation of content, information, and identity security policies and processes to protect the network, systems, and data; for coordinating IT audits and investigations; for processing public records requests; for planning and executing business continuity exercises; for coordinating activities with other divisions and departments; and for providing highly responsible technical support to the Chief Information Officer.

• This position is an in-person position with no opportunity for remote work.

APPLICATION PROCESS

Applicants will be assessed on the application submitted. Due to the volume of applications received, resumes will not be screenedfor the purpose of determining who is the most qualified to compete in the testing process. It is the applicant's responsibility to fill out the "Education" and "Work Experience" sections of the application with complete information and adequate detail. Do not substitute any part of the application with the words "SEE RESUME." Applicants that are the most qualified will be placed on an eligible list and invited to a selection interview with the hiring department.

The Human Resources Department reserves the right to revise the testing process to best meet the needs of the City. The City of Modesto is an equal opportunity employer. We are committed to fostering, cultivating and preserving a culture of diversity, equity and inclusion.

ESSENTIAL AND MARGINAL FUNCTION STATEMENTS

Essential and other important responsibilities and duties may include, but are not limited to, the following :

Essential Functions :

Oversee, design, select, implement and maintain technical and organizational security controls to ensure the confidentiality, integrity, security, and availability of assets, information, data, and services.

Actively monitor systems performance, architecture changes, and upgrades to proactively avert potential problems; monitor the City's networks for security breaches and investigate violations when they occur.

Review, implement, update and document City-wide information security policies and procedures; recommend and implement goals and objectives; establish performance standards and methods for providing technical and professional information technology support to City departments.

Plan, develop, and oversee the work of staff involved in the performance of professional and technical information technology functions.

Evaluate operations and activities of assigned section; implement improvements and modifications; prepare various reports on operations and activities.

Secure enterprise information by designing, implementing, and enforcing security controls, safeguards, policies, and procedures.

Review and assure security standards and procedures are reasonable and adequate; verify security measures and procedures are functional, maintained and tested.

Serve as security information resource to staff, identifying security issues and recommending risk-reduction solutions; provide confidential services, as requested.

Develop, produce, and execute security awareness orientation and training programs.

Assume a key role in the execution of professional IT consulting / development projects; oversee the work of contractors involved with City IT projects and systems; correspond and collaborate with third-party applications, vendor sales, and support.

Participate in budget preparation and administration; prepare cost estimates for budget recommendations; submit justifications for staffing, equipment, materials, and supplies; monitor and control expenditures.

Use formal project management techniques and tools to effectively manage the scope of work, project costs, technical resources, and maintain schedule integrity; utilize project management software; make modifications and adjustments to ensure projects are delivered on time and within budget, as required.

Manage complex business changes in the implementation of emerging Information Technologies.

Interface with appropriate department staff in defining systems standards and operating procedures.

Utilize current and emerging networking, communications, or operating system technologies.

Carry out business process analysis / re-engineering, using a formal and proven methodology.

Review system design and end-user documentation prepared by other project staff.

Answer questions and provide information to the public; investigate complaints and recommend corrective action to resolve complaints, as necessary.

Build and maintain positive working relationships with co-workers, other City employees, and the public using principles of good customer service.

Observe and maintain a safe working environment in compliance with established safety programs and procedures.

Marginal Functions :

Perform related duties as assigned.

MINIMUM QUALIFICATIONS

Knowledge of :

Information security polices, regulations, and requirements.

Principles and practices of administering network security.

Principles of incident response, disaster recovery, and forensics.

Principles and practices of technology advancements and how they can / will be applied within the current / future business models.

Information Technology best practices and quality assurance programs.

Project management methodologies, including project estimating, planning, executing, and examining business or functional issues including technical, operational, and management concerns.

Technical problem solving and solution development.

Pertinent federal, state, and local laws, codes, rules, and regulations.

Principles and practices of research analysis and management.

Principles and practices of budget development, implementation, and monitoring.

Principles and practices of supervision, training, and performance evaluations.

Industry standard networking and communications protocols, network design, management, and security.

Wide Area Networks, backbone network; Asynchronous Transfer Mode (ATM), and Regional Networks.

Research and evaluation methods associated with hardware, operating systems, and communications software; capabilities and limitations of current hardware, operating systems, and communications software.

Methods forimplementing and managing network operating systems.

Data communications and telecommunications with an emphasis in networking.

Office procedures, methods, and equipment including computers and applicable software applications such as word processing, spreadsheets, and databases.

Ability to :

Organize, implement, and direct assigned section activities and operations.

Manage network security including, planning system architecture, installing, configuring, and supporting security devices such as firewalls and intrusion detection systems (IDS).

Assess risks to systems and develop plans to minimize potential threats.

Design new security systems or upgrade existing ones.

Test and evaluate security, web and social media products.

Plan for disaster recovery in the event of security breaches.

Test procedures by simulating breaches / penetration testing.

Investigate breaches and carry out corrective actions.

Test systems for weak points / vulnerability scanning.

Ensure City procedures meet national and international network security standards.

Remain current with the latest trends and developments in the computer, networking, and telecommunications industry.

Apply knowledge of industry best practices, business process re-engineering, or change management methods.

Create and implement project plans.

Prepare project proposals including the submission of budget items.

Design and develop presentations, documentation, and training.

Prepare workflow and process diagrams and cost / benefit analysis.

Manage the technical aspects of the assigned systems, from analysis through deployment and management.

Interpret, explain, and apply City and department policies, procedures, rules, and regulations.

Assist in the development and monitoring of an assigned program budget.

Develop and recommend policies and procedures related to assigned operations.

Carry out and / or manage network design, development, deployment, support, and maintenance.

Manage the planning, installation, evaluation, monitoring, and implementation of non-application software associated with computer operating systems such as Unix or Microsoft Windows.

Supervise, train, and evaluate personnel.

Establish and maintain effective working relationships with those contacted in the course of work.

Communicate clearly and concisely, both orally and in writing.

Operate office equipment including computers and supporting word processing, spreadsheet, and database applications.

EXPERIENCE AND TRAINING GUIDELINES

Any combination of experience and training that would likely provide the required knowledge and abilities is qualifying. A typical way to obtain the knowledge and abilities would be :

Experience :

Four years of increasingly responsible experience installing, implementing, and monitoring of communications or operating system software and hardware, performing network administration, maintaining high-end computing platforms, automated business systems, and implementing new systems.

Training :

Equivalent to a Bachelor's degree from an accredited college or university with major course work in a computer related field, business information systems, public administration, business administration, or a related field.

License or Certificate :

Possession of, or the ability to obtain, a valid California driver's license.

Additional Requirements :

Incumbents must be able to pass a P.O.S.T. level background investigation prior to appointment for clearance to work on Police Department Information Systems.

PHYSICAL AND MENTAL REQUIREMENTS

Mobility : frequent use of keyboard; frequent sitting for long periods of time; occasional bending or squatting. Lifting : frequently up to 10 pounds; occasionally up to 25 pounds. Vision : constant use of overall vision; frequent reading and close-up work; occasional color and depth vision. Dexterity : frequent repetitive motion; frequent writing; frequent grasping, holding, and reaching. Hearing / Talking : frequent hearing and talking, in person and on the phone. Emotional / Psychological : frequent decision-making and concentration; frequent public and / or coworker contact; occasional working alone. Environmental : frequent exposure to noise.

WORKING CONDITIONS

Work is performed in a typical temperature-controlled office environment subject to typical office noise and environment. Positions require occasional overtime or weekend work and the ability to travel.

Modesto Confidential and Management Association (MCMA)

Employee benefits are subject to change and are not guaranteed. For a detailed explanation of benefits currently in effect please see the Memoranda of Understanding.

PUBLIC EMPLOYEES' RETIREMENT SYSTEM : CalPERS enrollment in either the 2% @ 60 or the 2% @ 62 formula is dependent on eligibility, as per AB 340. Employee pays the full member contribution. Retirement benefit is based on the employees three year final compensation average. The City does not participate in Social Security except for the required 1.45% Medicare contribution by both the City and the employee (applies to employees hired after 4-1-86).

HOLIDAYS : 12 paid holidays per year plus 8 hours holiday credit.

MANAGEMENT LEAVE : 80 hours per year for positions exempt from overtime.

VACATION : Accrued at the rate of two weeks during the first year, increasing to five weeks during the 21st year of service.

SICK LEAVE : Accumulated at 8 hours per month, 96 hours per year. Employees may accumulate up to 2,200 hours.

MEDICAL INSURANCE : Health, dental and vision coverage is provided. The City's monthly contribution to health, dental and vision benefits is based on a three-tier system as follows :

$ 2,028.00 Employee + Family

$ 1,436.00 Employee + 1 Dependent

$ 718.00 Employee Only

$ 450.00 Opt Out

The employee pays the balance. An employee who opts out of health coverage receives the amount noted above minus dental and vision premium on their paycheck and treated as taxable income. Dental and vision coverage continuation is available upon retirement.

DEFERRED COMPENSATION : With a matching contribution by the employee, the City will contribute 1.5% of salary, increasing to 2.5% at 9+ years of service, to a voluntary 457 Plan.

RETIREE HEALTH SAVINGS ACCOUNT (RHS) : $2,880 initial deposit provided upon completion of a two (2) year vesting period. After initial contribution, the City shall contribute $120 per month.

LIFE INSURANCE : Coverage in the amount of $120,000 is provided by the City. Supplemental coverage is available at employee cost.

DISABILITY INSURANCE : Coverage is provided by the City, at City cost. This benefit pays 66 2 / 3% of the first $12,000 per month in salary.

EDUCATIONAL INCENTIVE : Master's Degree Pay in the amount of 5% of salary. Bachelor's Degree Pay in the amount of 2.5% of salary.

BILINGUAL INCENTIVE LEAVE : Employees who pass a review panel and are needed in this capacity by the department, will receive 3 hours of Bilingual Leave Time per pay period into their Compensatory Time Off (CTO) balance.

LONGEVITY PAY : 2.5% of salary at 10 years of service.

SECTION 125 PLAN : Providing for pre-tax deductions for employee-paid health premium and dependent care costs.

01

I understand that in order for my application to receive every consideration in the selection process, I must complete the following Supplemental Questions. I understand these responses must match the information I provide in the Work Experience and Education sections of my application. I certify that all information provided on this application and the Supplemental Questions is true to the best of my knowledge.

02

How many years of work experience do you have in the following areas?

03

Rate your experience related to working with a Security Incident Management System (SIEM).

04

Describe the SIEM work performed as rated in the question above. If no experience, indicate N / A.

05

Rate your work experience related to Firewall Security.

06

Describe the Firewall Security work performed as rated in the question above. If no experience, indicate N / A.

07

Rate your work experience related to Cybersecurity Controls and Standards.

08

Describe your Cybersecurity Controls and Standards work performed as rated in the question above. If no experience, indicate N / A.

09

Rate your experience related to reviewing, implementing, and updating Cybersecurity Policies and Procedures.

10

Describe the Cybersecurity Policies and Procedures work performed as rated in the question above. If no experience, indicate N / A.

Required Question