Governance, Risk, and Compliance (GRC) Analyst (1042) - Department of Technology

Company Description

Specific information regarding this recruitment process is listed below: 

• Application Opening - Wednesday, October 15, 2025.

• Application Deadline - Interested candidates are encouraged to apply as soon as possible, as this job announcement will close at any time, but not earlier than 11:59PM PST, Wednesday, October 29, 2025.

About Department of Technology

Are you ready to make an impact in one of the most innovative cities? The Department of Technology (DT) is looking for passionate IT professionals to help shape the future of technology in San Francisco! As the centralized technology services provider for the City and County of San Francisco (CCSF), DT delivers critical infrastructure and services to over 33,000 employees—supporting public safety, municipal broadband, cybersecurity, cloud solutions, and more! With a $140M+ annual budget and a team of 300+ experts, DT is leading the charge in digital transformation. DT provides services through our core areas of IT Excellence:

• IT Project Management Office
• Enterprise Application Services
• Cloud Center of Excellence
• IT Operations and Support including the Service Desk and NOC
• City Infrastructure including the Network, Telcom and Data Centers
• Office of Cybersecurity including Cyber Defense, Identity Management and Disaster Recovery
• Public Safety Systems and Municipal Broadband Fiber
• SFGovTV Broadcasting Services
• IT Finance and Administration Services
• Emerging Technologies

Why Join Us?  Innovative & Impactful Work At DT, you won’t just work on IT—you’ll power a city. Your expertise will directly impact the residents of San Francisco, from closing the digital divide to ensuring secure, efficient city operations.

Benefits of Working for CCSF:  In addition to challenging and rewarding work, the City provides a generous suite of benefits to its employees.

• Competitive pay, benefits, and retirement options

• Career growth opportunities through training, internal mobility, and subsidized education

• Diverse work environment in a diverse city

• The Department has a hybrid work schedule

Join the team that’s shaping the future of technology in San Francisco. Apply today and be part of a dynamic, innovative, and mission-driven IT team!

Job Description

The City and County of San Francisco (City) is excited to be hiring a Governance, Risk, and Compliance (GRC) security analyst. The analyst will support a critical function of the Office of Cybersecurity that will be directly responsible for reducing risks posed to the City. The analyst will be tasked with the important role of identifying, assessing, controlling, and monitoring risks through the Citywide enterprise. They will gain firsthand experience supporting and maturing a GRC program. 

Major functions in this role include (and are not limited to):
 
-Perform cyber risk assessments against City cybersecurity requirements.
-Conduct Vendor Risk Assessments to assess security posture of vendors.
-Support the cyber awareness training and education program, including phishing simulations.
-Track and monitor risk mitigation plans.
-Develop routine reports in accordance with GRC metrics
-Coordinate with technology and business groups to assess, implement, and monitor IT-related security risks/hazards
-Conduct technical research to aid in threat assessment or risk mitigation activities
-Perform assessments of adherence to standards
-Perform review of policies and supporting procedures/processes.
-Stay on top of changes in the industry as it relates to security.

Appointment Type:

This Permanent Exempt (PEX), Full Time position is excluded by the Charter from the competitive civil service examination process and shall serve at the discretion of the appointment officer. The anticipated duration of this project position is thirty-six (36) months and will not result in an eligible list or permanent civil service hiring.

Work Location

Incumbent will conduct the majority of work at the Department of Technology, (1 S Van Ness, Ave San Francisco, CA 94103).  However, there may be situations where the incumbent will be required to work at other sites throughout the City of San Francisco as necessary.

Nature of Work

The Department may offer a hybrid work schedule. Traveling within San Francisco may be required.

Qualifications

Minimum Qualifications

Education: An associate degree in computer science, compu