Technology Risk and Resilience Specialist

Technology Risk and Resilience Specialist (1054) - Department of Technology 2 days ago Be among the first 25 applicants Get AI-powered advice on this job and more exclusive features. Recruitment Timeline Application Opening: Wednesday, October 22, 2025. Application Deadline: Candidates are encouraged to apply as soon as possible; the announcement will close at 11:59 PM PST, Wednesday, October 5, 2025. About the Department of Technology The Department of Technology (DT) is the centralized technology services provider for the City and County of San Francisco (CCSF), delivering critical infrastructure and services to over 33,000 employees. With a $140M+ annual budget and a team of 300+ experts, DT leads digital transformation across public safety, municipal broadband, cybersecurity, cloud solutions, and more. Core Areas of IT Excellence IT Project Management Office Enterprise Application Services Cloud Center of Excellence IT Operations and Support, including the Service Desk and NOC City Infrastructure – Network, Telcom, and Data Centers Office of Cybersecurity – Cyber Defense, Identity Management, and Disaster Recovery Public Safety Systems and Municipal Broadband Fiber SFGovTV Broadcasting Services IT Finance and Administration Services Emerging Technologies Why Join Us? Innovative & impactful work. Your expertise will directly impact residents of San Francisco, from closing the digital divide to ensuring secure, efficient city operations. Benefits of Working for CCSF Competitive pay, benefits, and retirement options Career growth opportunities through training, internal mobility, and subsidized education Diverse work environment in a diverse city Hybrid work schedule available Job Description The Technology Risk and Resilience Specialist develops, implements, and maintains risk management and resilience strategies to safeguard the organization’s technology infrastructure. The specialist works closely with stakeholders to identify risks, develop contingency plans, and ensure preparedness and recovery from disruptive events. Partner with City departments to architect, design, and rigorously test resilience solutions for all critical City systems. Conduct in-depth Technology Risk Assessments and Business Impact Analyses (BIA) to pinpoint vulnerabilities in IT infrastructure. Collaborate with engineering teams to embed resilience considerations into design, development, and testing phases of IT projects. Design, plan, and lead resilience testing and disaster recovery exercises. Execute thorough cybersecurity risk assessments to ensure compliance with City mandates. Perform Vendor Risk Assessments and implement mitigation strategies. Develop, analyze, and disseminate routine reports aligned with Governance, Risk, and Compliance (GRC) metrics. Coordinate with technology and business units to monitor IT-related security risks proactively. Conduct technical research to support threat assessments and adapt strategies to emerging risks. Regularly review and update IT policies, procedures, and processes. Maintain up-to-date understanding of industry changes related to security and integrate new developments. Appointment Type This Permanent Exempt, Full‑Time position is excluded by the Charter from the competitive civil service examination process and shall serve at the discretion of the appointment officer. The anticipated duration is thirty‑six (36) months and will not result in an eligible list or permanent civil service hiring. Work Location Incumbent will perform the majority of work at the Department of Technology, 1 S Van Ness Ave, San Francisco, CA 94103. Other City sites may be required as needed. Nature of Work The Department offers a hybrid work schedule. Traveling within San Francisco may be required. Qualifications Minimum Qualifications Education: Associate degree in business administration, public administration, information systems, economics, finance, computer science, or a closely related field from an accredited institution; or equivalent credit requirements. Experience: Five (5) years in information systems, including system analysis, business process design, development, implementation, or IT project management. Substitution: Up to two (2) years of experience may substitute for the degree on a year‑for‑year basis. One (1) year equals 30 semester units (45 quarter units) with at least 10 semester units in the relevant field. Desirable Qualifications 2‑3 years in IT system infrastructure, disaster recovery, business continuity, and risk management. In‑depth knowledge of DR and BC planning techniques and best practices. Experience executing technology recovery testing across data centers and cloud platforms. Proficiency in BC/DR lifecycle management and change projects. Quantitative risk management skills, including FAIR, applied to resilience initiatives. Ability to collaborate with technical, non‑technical, and management stakeholders. Familiarity with GRC platforms (e.g., ServiceNow, LogicGate, OneTrust). Preferable security certifications (e.g., Security+, CISA, CISM, CRISC). Preferred skills in SharePoint and reporting services. Awareness of privacy concepts and related regulations. Verification Applicants may be required to submit verification of qualifying education and experience. Verification must be on official letterhead, signed by the employer, and include dates, type of employment, job titles, duties, and any relevant certifications. Credit for experience outside the employee’s class will be recorded in accordance with Civil Service Commission rules. Falsifying information may result in disqualification. Selection Procedures The selection process will evaluate applications against minimum requirements and assess job‑related knowledge, skills, and abilities. Candidates may be invited for oral interviews and/or written or performance exercises. Applicants meeting minimum requirements are not guaranteed advancement. Additional Information Information About the Hiring Process Conviction History Employee Benefits Overview Equal Employment Opportunity Disaster Service Worker ADA Accommodation Right to Work Copies of Application Documents Diversity Statement Compensation: $72,112.50 – $90,712.50 (hourly) / $149,994 – $188,682 (annually) How to Apply Applications are accepted only through the City and County of San Francisco online portal. Visit https://careers.sf.gov and follow instructions. Select the "Apply Now" button and proceed with the on‑screen instructions. HR Analyst Information For questions regarding this recruitment process, contact Melanie Bautista at melanie.sotto@sfgov.org. Condition of Employment The City and County of San Francisco encourages women, minorities, and persons with disabilities to apply. All applicants will be considered regardless of protected categories. #J-18808-Ljbffr