Job Description

Chief Information Security Officer (0933 Manager V) - Department of Public Health

Apply using SmartRecruiters, the City and County of San Francisco's application portal.

Department: Public Health
Job class: 0933-Manager V
Starting salary range: $183,144.00 - $233,766.00 (Range A)
Role type: Permanent Civil Service
Hours: Full-time
Exam type: Position Based Test
Rule: Rule of the List
List type: Combined Promotive and Entrance

About

The Department of Public Health prioritizes equitable and inclusive access to quality healthcare for its community and values the importance of diversity in its workforce. All employees at the Department of Public Health work to advance equity, inclusion, and diversity with a specific lens and focus on race, ethnicity, gender, sex, sexuality, disability, and immigration status.

• Application Opening : Friday, November 21, 2025
• Application Deadline : Application filing will close on or after Friday, January 9, 2026.

Responsibilities

• Provides strategic leadership in evaluating and mitigating information security threats across the organization using a structured, risk-based methodology.
• Directs the ongoing development of the departments information security program, including project portfolio management, incident response, policy frameworks, compliance activities, threat and vulnerability management, and thirdparty risk management.
• Allocates and manages resources to support a robust security strategy; identifies and advocates for strategic investments, oversees capital and operating budgets, and delivers ROI analyses and budget recommendations.
• Partners with the Office of Compliance and Privacy Affairs to assess data security risks related to contracts, projects, artificial intelligence solutions, and other initiatives; develops tools and interventions to mitigate risks, establishes performance metrics, and monitors compliance through audits and assessments.
• Builds alignment and support for security goals and initiatives across internal and external stakeholders; communicates effectively with leadership at all levels on trends, risks, and the overall effectiveness of the security program.
• Promotes awareness and understanding of regulatory requirements across the organization; leads or collaborates on testing and auditing activities to ensure ongoing compliance and successful certifications.
• Analyzes security requirements and ensures compliance with industry standards such as HIPAA, NIST, and PCIDSS.
• Establishes and maintains comprehensive policies and procedures to support effective and sustainable security operations.
• Serves as the departments representative in securityrelated matters with City agencies and partners.
• Continuously monitors emerging trends, technologies, and best practices in cybersecurity to ensure the departments security posture remains current and effective.

Qualifications

• Education: Bachelors degree from an accredited college or university.
• Experience: Five (5) years of professional healthcare information systems security experience, of which three (3) years must include supervising IT professionals.

Education Substitution: Additional experience as described above may be substituted for the required degree on a yearforyear basis. One (1) year is equivalent to thirty (30) semester units / fortyfive (45) quarter units.

Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process.

Desirable Qualifications

• Possession of a Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) certification.

Equal Employment Opportunity

The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.

Job Tags

Similar Jobs