Governance, Risk, and Compliance (GRC) Analyst (1042) - Department of Technology Full-time | Permanent Exempt | 36‑month project. Responsibilities Perform cyber risk assessments against City cybersecurity requirements. Conduct Vendor Risk Assessments to evaluate security posture of vendors. Support the cyber awareness training and education program, including phishing simulations. Track and monitor risk mitigation plans. Develop routine reports in accordance with GRC metrics. Coordinate with technology and business groups to assess, implement, and monitor IT‑related security risks/hazards. Conduct technical research to aid in threat assessment or risk mitigation activities. Perform assessments of adherence to standards. Perform review of policies and supporting procedures/processes. Stay current on changes in the industry as it relates to security. Minimum Qualifications Associate degree in computer science, computer engineering, information systems, or a closely related field, OR equivalent in total course credits (≥60 semester or 90 quarter units, with ≥20 semester or 30 quarter units in one of the above fields). One (1) year of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. Bonus: One to two years working in a cyber GRC role, familiar with NIST CSF/RMF, 800‑53, FedRAMP, HIPAA, PCI‑DSS, SOC2, CAIQ, and GRC platforms (SNOW, LogicGate, OneTrust, etc.). Preferred certifications: Security+, CISA, CISM, CRISC. Proficient in Excel or similar; excellent written and verbal communication skills. Desirable Qualifications Risk analytics experience within IT. Comfortable having a technical discussion. Ability to define and communicate risk in business‑relevant language. Experience with SharePoint and reporting services. Knowledge of privacy concepts. Compensation $66,675.00 – $83,862.50 hourly / $138,684 – $174,434 annually. Benefits Competitive pay, benefits, and retirement options. Career growth opportunities through training and internal mobility. Diverse work environment. Hybrid work schedule. EEO Statement All applicants will be considered regardless of protected status under applicable law. All information will be kept confidential according to EEO guidelines. How to Apply Apply online at . Select “Apply Now” and follow the instructions. Contact Human Resources Analyst: Melanie Bautista – melanie.sotto@sfgov.org . #J-18808-Ljbffr Zuckerberg San Francisco General
...of concerns. Use appropriate methods and channels of communication. Maintain flexibility to work alternate shifts, locations, weekends, and additional/less hours based on the needs of the agency. Ensure all Imagine the Possibilities, Inc. policies and...