(INFORMATION SECURITY PROGRAM MANAGER

Redwood City: SUPERVISING I.T. ANALYST #25A-58 (20646758)

The supplemental questionnaire is a key component of your application and will be used to assist us in evaluating your qualifications, background, analytical ability and writing skills.

Limit each response to 300–500 words. While we limit the number of words per question, we encourage you to take your time to reflect on the prompts and submit thoughtful, complete, and nuanced answers. We anticipate that candidates should easily be able to answer all questions without going beyond the recommended 300 - 500 words per question.

1. Describe a cybersecurity program or initiative you led that involved multiple departments or stakeholders. What was your role, what framework or methodology did you apply (e.g., NIST CSF, Cal-Secure), and what were the outcomes?

2. Provide an example of a significant cybersecurity incident you handled or coordinated. What actions did you take, who was involved, and what lessons were applied afterward?

3. Redwood City relies on vendors and cloud providers for essential services. Describe how you have evaluated or enforced security compliance with third-party partners. What processes or tools did you use?

4. Share your experience developing, implementing, or enforcing cybersecurity policies and employee training programs. How did you drive adoption and ensure accountability across the organization?

5. What role have you played in conducting or overseeing cybersecurity risk assessments or penetration testing? How did you use the findings to improve your organization’s security posture?