Cybersecurity Risk Assessment Analyst - Department of Technology (1052)

The Office of Cybersecurity was established in 2022 by the Board of Supervisors at the best of Mayor London Breed as a Citywide Office located within the Department of Technology. We create citywide policies, act as a front line against cyber attacks, and help other departments be resilient to cyber-threats. Our work makes sure City services and what San Francisco does for you is cybersafe!

The Technology Risk and Resilience Team within DT’s Office of Cybersecurity is excited to hire a Cybersecurity Risk Assessment Analyst. The Cybersecurity Risk Assessment Analyst will support a critical function of the Office of Cybersecurity that is directly responsible for reducing risks posed to the City.

The Analyst will be tasked with the important role of identifying, assessing, controlling, and monitoring risks through the Citywide enterprise. They will gain firsthand experience supporting and maturing a Governance, Risk and Compliance program.

Essential Duties

• Perform cyber risk assessments against City cybersecurity requirements
• Conduct Vendor Risk Assessments to assess security posture of vendors
• Support the cyber awareness training and education program, including phishing simulations
• Track and monitor risk mitigation plans
• Develop routine reports in accordance with GRC metric.
• Coordinate with technology and business groups to assess, implement, and monitor IT-related security risks/hazards
• Conduct technical research to aid in threat assessment or risk mitigation activities
• Perform assessments of adherence to standards
• Perform review of policies and supporting procedures/processes
• Stay on top of changes in the industry as it relates to security

Job Type

This Permanent Exempt - Full Time position is excluded by the Charter from the competitive civil service examination process and shall serve at the discretion of the appointment officer. The anticipated duration of this project position is thirty-six (36) months and will not result in an eligible list or permanent civil service hiring.

Nature of Work

Incumbent must be willing to work a 40-hour week as determined by the department. Travel within San Francisco may be required.

The incumbent must be a resident of the State of California or be willing to relocate within 4 weeks of beginning employment with the City and County of San Francisco.

Work Location

Incumbent will conduct the majority of work at the Department of Technology, (1 S Van Ness, Ave San Francisco, CA 94103). However, there may be situations where the incumbent will be required to work at other sites throughout the City of San Francisco as necessary.

This position does not support fully remote work. Employees may be permitted to work a hybrid schedule with supervisor approval, after which they must work at least two days in the office every two weeks.