Overview

Job Location:
Downtown Denver

About Our Job

Who We Are

With competitive pay, great benefits, and endless opportunities, working for the City and County of Denver means seeing yourself working with purpose — for you, and those who benefit from your passion, skills and expertise. Join our diverse, inclusive and talented workforce of more than 11,000 team members who are at the heart of what makes Denver, Denver.

We value diversity of ethnicity, race, socioeconomic status, sexual identity, gender, religion, language, ability, and experience and exemplify this through the makeup of our team at all levels. You'll be right at home here if you cultivate strong relationships and push yourself, your work, the people around you and Denver to the next level.

The Technology Services Department (TS) of the City and County of Denver use state-of-the-art technologies and methodologies to deliver and improve the systems, applications, and operations to our customers. Technology Services supports the people, agencies, and ideas that make the City and County of Denver a world-class city. The city offers a unique opportunity to work with a diverse business and technology environment on a large scale as we employ more than 13,000 people, of which 9,000+ are daily technology consumers in support of a diverse population over 700,000 Denverites.

What We Offer

The City and County of Denver offers a competitive salary commensurate with education and experience. The salary range for this position is $70,765.00 – $116,762.00/year, based on education and experience. We also offer generous benefits for full-time employees which includes but is not limited to:

  • A guaranteed life-long monthly pension, once vested after 5 years of service
  • 457B Retirement plan
  • 132 hours of PTO earned within first year + 11 paid holidays, 1 personal holiday and 1 volunteer day per year
  • Competitive medical, dental and vision plans effective within 1 month of start date

Location

The City and County of Denver supports a hybrid workplace model. Employees work where needed, at a job site several days a week and off-site as needed. Employees must work within the state of Colorado on their off-site days.

What You’ll Do

The City and County of Denver (CCD) is seeking a Data Protection Governance, Risk, Compliance, (GRC) Analyst holistically, ensuring risk and vulnerabilities are viewed not only from a system security standpoint, although from the lens of the end user and application. In this role, you will be a key stakeholder in the CCD GRC Team.

Specifically, you will focus on managing the CCD Technology Services (TS) Vendor Risk Assessment Program and provision and monitor cybersecurity completion for City & County of Denver Employees. Ensuring all new and existing Citywide Technology vendors are assessed through our initial and annual risk assessment monitoring. you will evaluate all request for risk assessment and determine necessary reviews and assessments. You will work with vendors and various stakeholders within CCD for vendor risk assessment completion.  You will also communicate all applicable assessment conclusions such as specific compliance or contract language needs and approvals and denials related to the vendor risk assessment. You will manage an annual risk assessment monitoring which will include assessing vendors for risk and conducting a high-level monitoring of the vendors. The selected candidate also determine of training needs of CCD employees based on identified user behavior and risk. You will work with HR workday learning folks to ensure training in provisioned to all applicable CCD employees.  Training completion will be monitored and follow up will occur with employees who do not complete training timely.  You will also support other GRC activities such as approval/denial of third-party file share utilization, and other governance, risk, and compliance activities such as assessing for risk, ensuring compliance with various regulatory requirements and working on project such as the role-based access control project.

Responsibilities

  • Utilize ServiceNow to manage Vendor Risk Assessments
  • Utilize ServiceNow to approve third party file share permission requests
  • Respond to and organize responses to third part risk assessment requests from CCD.
  • Review & select training material and manage training completion.
  • Performs other related duties as assigned.

What You’ll Bring

  • 1-3 years of experience working in data protection and/or governance, risk, compliance. Years of experience can supplement education requirements.  
  • Knowledge and experience with application and compliance of below regulations is preferred:
    • US Department of Commerce, National Institute of Standards and Technology (NIST), Cybersecurity and Privacy Frameworks
    • Payment Card Industry Data Security Standard (PCI-DSS)
    • US Department of Health and Human Services, Health Insurance Portability and Accountability Act (HIPAA)
    • US Department of Justice, Federal Bureau of Investigation, Criminal Justice Information Services Security (CJIS) Policy

Minimum Qualifications

  • Education Requirement: Bachelor's Degree in Information Technology or a related field based on a specific position(s).
  • Experience Requirement: Two years of experience with data protection, governance, risk assessment, and compliance with information technology systems.
  • Education and Experience Equivalency: One (1) year of the appropriate type and level of experience may be substituted for each required year of post-high school education.
  • Additional appropriate education may be substituted for the minimum experience requirements
  • Must obtain Criminal Justice Information Services (CJIS) clearance within the probationary period.

Application Deadline

This position is expected to stay open until October 14th. Please submit your application as soon as possible.

About Everything Else

Job Profile

CI3432 IT Data Protection Analyst Associate

To view the full job profile including position specifications, physical demands, and probationary period, click here.

Position Type

Unlimited

Position Salary Range

$70,765.00 – $116,762.00

Starting Pay

Based on education and experience

Agency

Technology Services

The City and County of Denver provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, national origin, disability, genetic information, age, or any other status protected under federal, state, and/or local law. 

It is your right to access oral or written language assistance, sign language interpretation, real-time captioning via CART, or disability-related accommodations. To request any of these services at no cost to you, please contact Jobs@Denvergov.org with three business days’ notice.

Applicants for employment with the City and County of Denver must have valid work authorization that does not require sponsorship of a visa for employment authorization in the U.S.

For information about right to work, click here for English or here for Spanish.