Data Protection Governance, Risk, and Compliance Analyst

$70,765 - $116,762/Yr

City and County of Denver - Denver, CO

Full-time - Entry Level

Denver, CO

10,001+ employees

Executive, Legislative, and Other General Government Support

About the position

The City and County of Denver is seeking a Data Protection Governance, Risk, and Compliance (GRC) Analyst to manage the Vendor Risk Assessment Program and monitor cybersecurity compliance for employees. This role involves assessing risks associated with technology vendors, ensuring compliance with various regulations, and providing training to employees based on identified risks. The position is integral to the Technology Services Department, which supports a diverse and inclusive workforce while utilizing state-of-the-art technologies.

Responsibilities

• Utilize ServiceNow to manage Vendor Risk Assessments
• Utilize ServiceNow to approve third party file share permission requests
• Respond to and organize responses to third party risk assessment requests from CCD
• Review & select training material and manage training completion
• Perform other related duties as assigned.

Requirements

• 1-3 years of experience working in data protection and/or governance, risk, compliance
• Bachelor's Degree in Information Technology or a related field
• Knowledge of regulations such as NIST, PCI-DSS, HIPAA, and CJIS

Nice-to-haves

• Experience with ServiceNow
• Familiarity with cybersecurity frameworks
• Understanding of vendor risk management processes

Benefits

• 457(b) Retirement plan
• Health insurance
• Paid holidays
• Paid time off
• Vision insurance