GRC Data Analyst — Hybrid, Risk & Compliance Lead

City and County of Denver; United States; Hybrid; USD 74,000 - 123,000; Full time

Benefits offered by this job

Pension plan

457B retirement plan

PTO 140 hours first year + holidays +1

Medical/dental/vision

Job summary

The City and County of Denver is seeking a Governance, Risk, and Compliance Analyst to join the Technology Services team. You will drive vendor risk assessments, policy governance, audits, and access control initiatives to reduce risk across CCD systems.

The role emphasizes independence, initiative, and collaboration with multiple agencies. Ideal candidates have 2–3 years in data protection/gov‑risk‑compliance, experience with Workday, ServiceNow, and Box, and a bachelor’s degree in IT or a

Qualifications

• Bachelor's degree in IT or related field.
• 2+ years in data protection, governance, risk, and compliance.
• Experience with audits and regulatory frameworks.

Responsibilities

• Manage vendor risk assessments and third-party risk reviews.
• Coordinate policy governance and annual policy reviews.
• Lead external audits and prepare responses to audit findings.
• Review access controls and ensure least-privilege access.
• Develop and deliver security-awareness training programs.

Skills

Data protection

GRC expertise

Policy development

Audits

Workday

ServiceNow

OneTrust

Audit coordination

Education

Bachelor's Degree in Information Technology or related field

Tools

Workday

OneTrust

ServiceNow

Box

Job description

The City and County of Denver is seeking a Governance, Risk, and Compliance Analyst to join the Technology Services team. You will drive vendor risk assessments, policy governance, audits, and access control initiatives to reduce risk across CCD systems.

The role emphasizes independence, initiative, and collaboration with multiple agencies. Ideal candidates have 2–3 years in data protection/gov‑risk‑compliance, experience with Workday, ServiceNow, and Box, and a bachelor’s degree in IT or a