Information Security Analyst – Cybersecurity Division – Human Services Agency (1053) (132466)

The City and County of San Francisco (City) is hiring a Cybersecurity Risk Analyst. The analyst will support a critical function of the City's Cybersecurity Division that will be directly responsible for reducing risks posed to the City. The analyst will be tasked with the important role of identifying, assessing, controlling, and monitoring risks through the Citywide enterprise.

They will gain firsthand experience supporting and maturing a Technology Risk & Resilience program.

ESSENTIAL TASK AND DUTIES

According to Civil Service Commission Rule 109, the duties specified below are representative of the range of duties assigned to this job class and are not intended to be an inclusive list.

• Performs cyber risk assessments against City cybersecurity requirements
• Conducts Vendor Risk Assessments to assess security posture of vendors
• Supports the cyber awareness training and education program, including phishing simulations
• Tracks and monitors risk mitigation plans’ and develop reports in accordance with GRC metrics
• Coordinates with technology and business groups to assess, implement, and monitor IT-related security risks/hazards
• Performs review of policies and supporting procedures/processes
• Conducts technical research to aid in threat assessment and risk mitigation activities, as well as changes in the industry as it relates to security
• Helps develop and monitor cybersecurity controls and support City departments in control maintenance