Data Protection Specialist
State of California, Sacramento, CA, United States
Under the direction of the Information Technology Manager I (ITM1), the Information Technology Specialist I (ITS1) supports the Information Security Office (ISO) Data Protection Unit as a Data Protection Specialist. The incumbent supports privacy and security coordination efforts by fulfilling duties relating to the data protection and privacy programs within the DDS Information Technology Division (ITD). The incumbent plays a vital and proactive role in implementing and facilitating ongoing privacy and security compliance auditing, monitoring, and education activities. The incumbent will work closely with other members of the security team, and other stakeholders to ensure the confidentiality, integrity, and availability of the organization's information assets.
Effective July 1, 2025, State employees are subject to a salary reduction of three percent in exchange for five hours per month of the Personal Leave.
You will find additional information about the job in the Duty Statement .
Working Conditions
Under Government Code 14200, this position is a hybrid, in-office/telework position, and may be subject to change. Incumbent can be required to report to the office, or any designated location at any time. Telework agreements can be modified and/or cancelled at any time. All commute expenses to the reporting location will be the responsibility of the selected candidate.
Pursuant to California Government Code requirements, candidates must be residents of the State of California at the time of appointment.
This position requires lawful authorization to work in the United States. The Department does not sponsor employment visas for this position.
Work is performed in an open-office environment with partitioned workspaces. Extended use of computer systems and related technology. Availability for 24/7 on-call and weekend support as required. Occasional travel (up to 10 percent) for business-related activities.
Minimum Requirements
You will find the Minimum Requirements in the Class Specification. INFORMATION TECHNOLOGY SPECIALIST I Additional Documents
Job Application Package Checklist Duty Statement
Position Details
Job Code #: JC-510908
Position #(s): 472-508-1402-908
Working Title: Data Protection Specialist
Classification: INFORMATION TECHNOLOGY SPECIALIST I $6,513.00 - $8,729.00 A $7,163.00 - $9,599.00 B $7,864.00 - $10,537.00 C New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.
# of Positions: 1
Work Location: Sacramento County
Telework: Hybrid
Job Type: Permanent, Full Time
Department Information The California Department of Developmental Services (Department) is the agency through which the State of California provides services and supports to individuals with developmental disabilities.
These disabilities include intellectual disability, cerebral palsy, epilepsy, autism and related conditions. Services are provided through state-operated developmental centers and community facilities, and contracts with 21 nonprofit regional centers. The regional centers serve as a local resource to help find and access the services and supports available to individuals with developmental disabilities and their families.
The Department is located in a modern, sustainable and innovative office building at 1215 "O" Street, Sacramento, California. Some amenities of the building include:
First floor retail space (separate access from 12 th Street) Café with multiple vendors Outdoor seating for meal breaks Employee fitness center which includes a yoga studio, cardio equipment and weights Plaza area with kitchenette on each floor Lactation rooms Department Website: http://www.dds.ca.gov
Special Requirements The Statement of Qualifications (SOQ) must be numbered in the same order as the following areas, typed in 12-point Arial font, single spaced, and be no more than two pages in length. Applicants who fail to answer the questions or submit an SOQ may not be considered.
SOQ Question 1 - Evaluating GenAI Products in a HIPAA Environment
Describe your experience evaluating or researching software products that process or store sensitive data. In your response, address:
How you would evaluate whether a generative AI product can safely interact with Protected Health Information (PHI) The types of documentation or security assurances you would request from a vendor How you would determine whether the vendor qualifies as a Business Associate under the Health Insurance Portability and Accountability Act Any frameworks, standards, or methodologies you use to evaluate vendor risk
SOQ Question 2 - Risk Assessment of AI Systems Handling PHI
Generative AI systems can introduce unique risks when used with healthcare data. Describe how you would conduct a risk assessment of an AI-enabled product proposed for use by clinicians or staff.
In your response, address:
Key privacy and security risks associated with AI systems handling PHI Questions you would ask vendors about data retention, model training, and data sharing Controls or safeguards you would recommend before approving the technology How you would communicate your findings to security, privacy, and executive leadership
If you are using list eligibility from an on-line exam to qualify for this position, you MUST include with your application any documentation (i.e., copy of transcript, degree, license, etc.) to verify meeting the MQ's or you may not be considered for the position.
The MQs will be verified prior to interview and/or appointment. If it is determined that an applicant does not meet the MQs of the classification, the applicant may not be considered and withheld from the eligible list.
Application Instructions Completed applications and all required documents must be received or postmarked by the Final Filing Date in order to be considered. Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application. Final Filing Date: 3/23/2026 Who May Apply Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply.
Applications will be screened and only the most qualified applicants will be selected to move forward in the selection process. Applicants must meet the Minimum Qualifications stated in the Classification Specification(s).
How To Apply Complete Application Packages (including your Examination/Employment Application (STD 678) and applicable or required documents) must be submitted to apply for this Job Posting. Application Packages may be submitted electronically through your CalCareer Account at www.CalCareers.ca.gov. When submitting your application in hard copy, a completed copy of the Application Package listing must be included. If you choose to not apply electronically, a hard copy application package may be submitted through an alternative method listed below:
Address for Mailing Application Packages
You may submit your application and any applicable or required documents to:
Department of Developmental Services - Headquarters N/A Attn: Mimi Hairford Cert Unit 1215 O Street, MS 10-40 Sacramento , CA 95814
Address for Drop-Off Application Packages
You may drop off your application and any applicable or required documents at:
Department of Developmental Services - Headquarters N/A Mimi Hairford Cert Unit 1215 O Street, MS 10-40 Sacramento , CA 95814
08:00 AM - 05:00 PM
Required Application Package Documents
The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:
Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position. Resume is required and must be included. Statement of Qualifications - A Statement of Qualifications (SOQ) is required and is a narrative discussion of how the candidate's education, training, experience, and skills meet the minimum and desirable qualifications and qualify them for the position. The SOQ serves as a documentation of each candidate's ability to present information clearly and concisely in writing. SEE "SPECIAL REQUIREMENTS" ABOVE FOR INSTRUCTIONS.
Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.
Desirable Qualifications
In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:
Knowledge of: Strong background in privacy laws, compliance frameworks, and regulatory requirements. Familiarity with privacy laws (e.g., California Information Practices Act of 1977 and HIPAA) and U.S. federal frameworks like NIST Security and Privacy Controls and Cybersecurity Framework. Strong understanding of software development lifecycle (SDLC) and Agile/Scrum methodologies. Experience conducting research and analysis to recommend scalable AI solutions and system upgrades. Familiar with requirements to deploy and configure Generative AI tools across enterprise platforms. Experience performing Privacy Threshold and Impact Assessments, including documenting and evaluating Data Lifecyle, personal information handling, and privacy risk mitigation. Experience performing security assessments of software suppliers and third-party vendors, including evaluating privacy and security practices, contractual compliance, and security risk mitigation strategies. Full-stack application development, API development, and version control tools like GitHub.
Ability to: Review supplier documentation, conduct due diligence, and ensure alignment with organizational security and privacy standards. (This aligns with Privacy Coordinator's vendor risk evaluation duties and expands into supplier security assessments for GenAI and application development contexts.) Understand applied data classification and tagging policies to ensure secure handling of sensitive information across cloud and on-premises environments. Develop AI governance frameworks, usage guidelines, and ethical AI policies. Be skilled in creating user guides, FAQs, e-learning modules, and providing user training. Proven ability to collaborate with IT teams, legal, HR, and business units to integrate privacy and AI considerations into projects.
Benefits As a state employee working for the Department of Developmental Services, you and your family will have access to excellent medical, dental and vision insurance benefits in addition to retirement benefits.
Benefit eligibility may be based on job classification, bargaining unit, time base and length of appointment. Additional benefits may also be outlined for specific bargaining units in employee collective bargaining contracts. For more information, please visit the links below:
State Employees - CalHR Benefits Website
CalPERS Health Benefit Summary 2026
Benefit information can be found on the CalHR website and the CalPERS website.
Contact Information The Human Resources Contact is available to answer questions regarding the position or application process. Department Website: http://www.dds.ca.gov Human Resources Contact: Mimi Hairford (916) 654-3378 mimi.hairford@dds.ca.gov
Please direct requests for Reasonable Accommodations to the interview scheduler at the time the interview is being scheduled. You may direct any additional questions regarding Reasonable Accommodations or Equal Employment Opportunity for this position(s) to the Department's EEO Office. EEO Contact: Equal Employment Opportunity Office (916) 654-1888 OHRAS@dds.ca.gov California Relay Service: 1-800-735-2929 (TTY), 1-800-735-2922 (Voice) TTY is a Telecommunications Device for the Deaf, and is reachable only from phones equipped with a TTY Device.
Additional Information
Electronic application submission is highly encouraged.
Multiple positions may be filled from this recruitment. This recruitment may be utilized to fill future vacancies that may occur during the life of the certification list.
Possession of Minimum Qualifications will be verified prior to interview and/or appointment. If you are meeting Minimum Qualifications with education, you must include your unofficial transcripts/diploma for verification. Official transcripts may be required upon appointment. If it is determined an applicant does not meet the Minimum Qualifications, the candidate may be withheld from the eligibility list, rendering them inactive and ineligible to be hired for the position. Candidates who have been withheld may file an appeal with the California Department of Human Resources.
All appointments are subject to State Restriction of Appointment (SROA), Departmental Restriction of Appointment (DROA), Re-employment List procedures, pre-employment physical and fingerprint clearances. Further information on the definition of the above may be found on the California Department of Human Resources' website at: www.calhr.ca.gov .
If you have not taken the Information Technology Specialist I exam/assessment you may find the exam for this classification at the link below. You must take and pass the exam/assessment to obtain eligibility for hire. Click here to gain list eligibility.
Remove Any Confidential Information
Do not include any confidential information on any documents you submit for a job vacancy, such as your State application, resume, or educational transcripts.
Confidential information that should be excluded or removed from these documents includes, but is not limited to, your Social Security Number (SSN), birthdate, student identification number, driver's license number (unless required), basis of eligibility, examination results, LEAP status, marital status, and age. Confidential information on the first page of applications submitted electronically online, such as Easy ID number, SSN, examination related information, and driver's license number will automatically be redacted upon submission.
Equal Opportunity Employer The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.
It is an objective of the State of California to achieve a drug-free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.
Effective July 1, 2025, State employees are subject to a salary reduction of three percent in exchange for five hours per month of the Personal Leave.
You will find additional information about the job in the Duty Statement .
Working Conditions
Under Government Code 14200, this position is a hybrid, in-office/telework position, and may be subject to change. Incumbent can be required to report to the office, or any designated location at any time. Telework agreements can be modified and/or cancelled at any time. All commute expenses to the reporting location will be the responsibility of the selected candidate.
Pursuant to California Government Code requirements, candidates must be residents of the State of California at the time of appointment.
This position requires lawful authorization to work in the United States. The Department does not sponsor employment visas for this position.
Work is performed in an open-office environment with partitioned workspaces. Extended use of computer systems and related technology. Availability for 24/7 on-call and weekend support as required. Occasional travel (up to 10 percent) for business-related activities.
Minimum Requirements
You will find the Minimum Requirements in the Class Specification. INFORMATION TECHNOLOGY SPECIALIST I Additional Documents
Job Application Package Checklist Duty Statement
Position Details
Job Code #: JC-510908
Position #(s): 472-508-1402-908
Working Title: Data Protection Specialist
Classification: INFORMATION TECHNOLOGY SPECIALIST I $6,513.00 - $8,729.00 A $7,163.00 - $9,599.00 B $7,864.00 - $10,537.00 C New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.
# of Positions: 1
Work Location: Sacramento County
Telework: Hybrid
Job Type: Permanent, Full Time
Department Information The California Department of Developmental Services (Department) is the agency through which the State of California provides services and supports to individuals with developmental disabilities.
These disabilities include intellectual disability, cerebral palsy, epilepsy, autism and related conditions. Services are provided through state-operated developmental centers and community facilities, and contracts with 21 nonprofit regional centers. The regional centers serve as a local resource to help find and access the services and supports available to individuals with developmental disabilities and their families.
The Department is located in a modern, sustainable and innovative office building at 1215 "O" Street, Sacramento, California. Some amenities of the building include:
First floor retail space (separate access from 12 th Street) Café with multiple vendors Outdoor seating for meal breaks Employee fitness center which includes a yoga studio, cardio equipment and weights Plaza area with kitchenette on each floor Lactation rooms Department Website: http://www.dds.ca.gov
Special Requirements The Statement of Qualifications (SOQ) must be numbered in the same order as the following areas, typed in 12-point Arial font, single spaced, and be no more than two pages in length. Applicants who fail to answer the questions or submit an SOQ may not be considered.
SOQ Question 1 - Evaluating GenAI Products in a HIPAA Environment
Describe your experience evaluating or researching software products that process or store sensitive data. In your response, address:
How you would evaluate whether a generative AI product can safely interact with Protected Health Information (PHI) The types of documentation or security assurances you would request from a vendor How you would determine whether the vendor qualifies as a Business Associate under the Health Insurance Portability and Accountability Act Any frameworks, standards, or methodologies you use to evaluate vendor risk
SOQ Question 2 - Risk Assessment of AI Systems Handling PHI
Generative AI systems can introduce unique risks when used with healthcare data. Describe how you would conduct a risk assessment of an AI-enabled product proposed for use by clinicians or staff.
In your response, address:
Key privacy and security risks associated with AI systems handling PHI Questions you would ask vendors about data retention, model training, and data sharing Controls or safeguards you would recommend before approving the technology How you would communicate your findings to security, privacy, and executive leadership
If you are using list eligibility from an on-line exam to qualify for this position, you MUST include with your application any documentation (i.e., copy of transcript, degree, license, etc.) to verify meeting the MQ's or you may not be considered for the position.
The MQs will be verified prior to interview and/or appointment. If it is determined that an applicant does not meet the MQs of the classification, the applicant may not be considered and withheld from the eligible list.
Application Instructions Completed applications and all required documents must be received or postmarked by the Final Filing Date in order to be considered. Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application. Final Filing Date: 3/23/2026 Who May Apply Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply.
Applications will be screened and only the most qualified applicants will be selected to move forward in the selection process. Applicants must meet the Minimum Qualifications stated in the Classification Specification(s).
How To Apply Complete Application Packages (including your Examination/Employment Application (STD 678) and applicable or required documents) must be submitted to apply for this Job Posting. Application Packages may be submitted electronically through your CalCareer Account at www.CalCareers.ca.gov. When submitting your application in hard copy, a completed copy of the Application Package listing must be included. If you choose to not apply electronically, a hard copy application package may be submitted through an alternative method listed below:
Address for Mailing Application Packages
You may submit your application and any applicable or required documents to:
Department of Developmental Services - Headquarters N/A Attn: Mimi Hairford Cert Unit 1215 O Street, MS 10-40 Sacramento , CA 95814
Address for Drop-Off Application Packages
You may drop off your application and any applicable or required documents at:
Department of Developmental Services - Headquarters N/A Mimi Hairford Cert Unit 1215 O Street, MS 10-40 Sacramento , CA 95814
08:00 AM - 05:00 PM
Required Application Package Documents
The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:
Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position. Resume is required and must be included. Statement of Qualifications - A Statement of Qualifications (SOQ) is required and is a narrative discussion of how the candidate's education, training, experience, and skills meet the minimum and desirable qualifications and qualify them for the position. The SOQ serves as a documentation of each candidate's ability to present information clearly and concisely in writing. SEE "SPECIAL REQUIREMENTS" ABOVE FOR INSTRUCTIONS.
Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.
Desirable Qualifications
In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:
Knowledge of: Strong background in privacy laws, compliance frameworks, and regulatory requirements. Familiarity with privacy laws (e.g., California Information Practices Act of 1977 and HIPAA) and U.S. federal frameworks like NIST Security and Privacy Controls and Cybersecurity Framework. Strong understanding of software development lifecycle (SDLC) and Agile/Scrum methodologies. Experience conducting research and analysis to recommend scalable AI solutions and system upgrades. Familiar with requirements to deploy and configure Generative AI tools across enterprise platforms. Experience performing Privacy Threshold and Impact Assessments, including documenting and evaluating Data Lifecyle, personal information handling, and privacy risk mitigation. Experience performing security assessments of software suppliers and third-party vendors, including evaluating privacy and security practices, contractual compliance, and security risk mitigation strategies. Full-stack application development, API development, and version control tools like GitHub.
Ability to: Review supplier documentation, conduct due diligence, and ensure alignment with organizational security and privacy standards. (This aligns with Privacy Coordinator's vendor risk evaluation duties and expands into supplier security assessments for GenAI and application development contexts.) Understand applied data classification and tagging policies to ensure secure handling of sensitive information across cloud and on-premises environments. Develop AI governance frameworks, usage guidelines, and ethical AI policies. Be skilled in creating user guides, FAQs, e-learning modules, and providing user training. Proven ability to collaborate with IT teams, legal, HR, and business units to integrate privacy and AI considerations into projects.
Benefits As a state employee working for the Department of Developmental Services, you and your family will have access to excellent medical, dental and vision insurance benefits in addition to retirement benefits.
Benefit eligibility may be based on job classification, bargaining unit, time base and length of appointment. Additional benefits may also be outlined for specific bargaining units in employee collective bargaining contracts. For more information, please visit the links below:
State Employees - CalHR Benefits Website
CalPERS Health Benefit Summary 2026
Benefit information can be found on the CalHR website and the CalPERS website.
Contact Information The Human Resources Contact is available to answer questions regarding the position or application process. Department Website: http://www.dds.ca.gov Human Resources Contact: Mimi Hairford (916) 654-3378 mimi.hairford@dds.ca.gov
Please direct requests for Reasonable Accommodations to the interview scheduler at the time the interview is being scheduled. You may direct any additional questions regarding Reasonable Accommodations or Equal Employment Opportunity for this position(s) to the Department's EEO Office. EEO Contact: Equal Employment Opportunity Office (916) 654-1888 OHRAS@dds.ca.gov California Relay Service: 1-800-735-2929 (TTY), 1-800-735-2922 (Voice) TTY is a Telecommunications Device for the Deaf, and is reachable only from phones equipped with a TTY Device.
Additional Information
Electronic application submission is highly encouraged.
Multiple positions may be filled from this recruitment. This recruitment may be utilized to fill future vacancies that may occur during the life of the certification list.
Possession of Minimum Qualifications will be verified prior to interview and/or appointment. If you are meeting Minimum Qualifications with education, you must include your unofficial transcripts/diploma for verification. Official transcripts may be required upon appointment. If it is determined an applicant does not meet the Minimum Qualifications, the candidate may be withheld from the eligibility list, rendering them inactive and ineligible to be hired for the position. Candidates who have been withheld may file an appeal with the California Department of Human Resources.
All appointments are subject to State Restriction of Appointment (SROA), Departmental Restriction of Appointment (DROA), Re-employment List procedures, pre-employment physical and fingerprint clearances. Further information on the definition of the above may be found on the California Department of Human Resources' website at: www.calhr.ca.gov .
If you have not taken the Information Technology Specialist I exam/assessment you may find the exam for this classification at the link below. You must take and pass the exam/assessment to obtain eligibility for hire. Click here to gain list eligibility.
Remove Any Confidential Information
Do not include any confidential information on any documents you submit for a job vacancy, such as your State application, resume, or educational transcripts.
Confidential information that should be excluded or removed from these documents includes, but is not limited to, your Social Security Number (SSN), birthdate, student identification number, driver's license number (unless required), basis of eligibility, examination results, LEAP status, marital status, and age. Confidential information on the first page of applications submitted electronically online, such as Easy ID number, SSN, examination related information, and driver's license number will automatically be redacted upon submission.
Equal Opportunity Employer The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.
It is an objective of the State of California to achieve a drug-free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.