Risk Senior Analyst (Remote From Anywhere In CO)
Print (https://www.governmentjobs.com/careers/colorado/jobs/newprint/5058173)
Apply
?
Risk Senior Analyst (Remote From Anywhere In CO)
Salary
$88,977.00 - $103,000.00 Annually
Location
Statewide, CO
Job Type
Full Time
Job Number
EGB93325
Department
Governor's Office of Information Technology
Opening Date
08/26/2025
Closing Date
9/7/2025 11:59 PM Mountain
FLSA
Determined by Position
Primary Physical Work Address
(Remote From Anywhere In CO)
FLSA Status
Exempt; position is not eligible for overtime compensation.
Department Contact Information
oit_hr@state.co.us
Type of Announcement
This announcement is not governed by the selection processes of the classified personnel system. Applications will be considered from residents and non-residents of Colorado.
How To Apply
Please submit an online application for this position at https://www.governmentjobs.com/careers/colorado. Reach out to the Department Contact to apply using a paper application, including any supplemental questions. Failure to submit a complete and timely application may result in the rejection of your application. Applicants are responsible for ensuring that application materials are received by the appropriate Human Resources office before the closing date and time listed.
Description
Benefits
Questions
Department Information
Together, we innovate for a stronger Colorado
The work of employees at the Governor's Office of Information Technology (OIT) is challenging and diverse because the needs of agencies, customers and Coloradans constantly evolve. But our focus never changes: improve the lives of all Coloradans through innovation and collaboration. We're building one of the nation's leading government IT organizations by reimagining how we support agencies, building first-of-their-kind applications, and creating an inclusive, collaborative culture, together. Join us in the important work of providing equitable access to services.
Watch this video (https://www.youtube.com/watch?v=rZaEQvILYKI) to learn about how OIT is thinking differently!
Description of Job
IMPORTANT NOTE: Please review your application to ensure completion. For the most equitable applicant experience, OIT's hiring team considers only the contents of your application to review your qualifications. Please do not include any attachments (such as resume or cover letter) with your application as these items are not used by OIT's hiring team.
Are you looking for an opportunity to play a critical role in the development and administration of our comprehensive security risk and compliance program at OIT? As our new Senior Risk Analyst , you will be responsible for ensuring our adherence to all established legal, statutory, and contractual requirements (http://requirements.as) . Your work in this role will be integral to strengthening our overall security posture and upholding the integrity and confidentiality of state information systems.
As a key member of our team, your primary responsibilities include planning, developing, and managing risk assessment initiatives to systematically identify, quantify, and prioritize risks against established criteria. You will also collaborate across functional teams, partner with subject matter experts, and serve as a primary liaison to external partners.
Your expertise will also be instrumental in translating complex risk findings for stakeholders, providing clear interpretation and guidance. That guidance, and your validation of remediation efforts, will ensure they have been satisfactorily completed and that all policies and procedures are accurately implemented and documented.
Key Responsibilities Include:
Developing and maintaining comprehensive security policies and procedures, ensuring adherence to all legal, state, and contractual regulations.
Planning and conducting security risk assessments; acting as the primary contact for internal and external risk assessments, including collaborating with teams to gather information and prepare official responses.
Developing and tracking Plans of Action & Milestones (POA&Ms) to address and resolve identified risks or compliance gaps, and following up to ensure solutions are effective and properly documented.
Reviewing and assessing the security posture of new vendors, contractors, and their associated contracts.
Enhancing risk and compliance activities to increase efficiency and effectiveness, and integrating security requirements into project implementation plans.
Building and reporting on the risk program, and continuously improving formal risk management processes, including tracking key metrics, generating security trend reports, and presenting findings to team leaders.
Serving as a key decision-maker for new project launches, providing final approval once all security and compliance standards have been met.
Minimum Qualifications, Substitutions, Conditions of Employment & Appeal Rights
A wide salary range is posted for this position and any job offer is based upon a salary analysis to comply with the Colorado Equal Pay for Equal Work Act. The salary analysis considers relevant experience, education, certifications, and state seniority as compared to others doing substantially similar work. While all offers are compliant with the Colorado Equal Pay for Equal Work Act, there is no guarantee an offer will be at the top of the posted range based on the salary analysis.
This is a skills-based job announcement. The required minimum qualifications and/or education (if substituting for the proven experience, knowledge, and skills), are as follows:
Minimum Qualifications:
Five (5) or more years of work experience in the IT Security field, including Risk and Vulnerability Management, and Compliance and Audit Management.
Risk Assessment experience.
Substitutions:
Training or Certification related to the work assigned to the position will be assigned credit towards substitution for experience and/or education, but cannot completely substitute for these qualifications.
If the minimum qualifications include a degree requirement, additional appropriate paid or unpaid experience will substitute for the required education on a year-for-year basis.
Preferred Qualifications:
CISA or CISSP certifications.
CRISC certification.
Knowledge or experience in SOC1 and SOC2, and other compliance reports.
Project Management experience.
Conditions of Employment:
OIT employees must comply with any screening procedures in place at state entity locations where they might be required to perform work.
A pre-employment background check will be conducted as part of the selection process.
Positions supporting some agencies such as the Department of Corrections and the Department of Public Safety will also require a pre-employment drug test.
This position may require travel within the specified geographic area, and to locations across the state as needed.
Supplemental Information
If this posting indicates "remote from anywhere in CO" in the title, periodic reporting to the primary state work location designated for the position is required. All remote work must be performed in Colorado.
While candidates from out of state will be considered for this role, the candidate selected for the position must relocate and reside in Colorado on the first day of their new position. A reasonable timeframe for relocation will be established on an individual basis, while considering business needs, and determining a start date.
We know it's important to support each other, and that means having a healthy balance of work and personal time. Visit our benefits (https://oit.colorado.gov/careers/benefits) to learn more about some of our great offerings that allow us all to have fulfilling lives.
Visit our How to Apply webpage (https://careers.colorado.gov/how-to-apply) to learn more about our application process and what to expect after you apply.
The State of Colorado strives to create a Colorado for All by building and maintaining workplaces that value and respect all Coloradans through a commitment to equal opportunity and hiring based on merit and fitness. The State is resolute in non-discriminatory practices in everything we do, including hiring, employment, and advancement opportunities.
The Governor's Office of Information Technology is committed to the full inclusion of all qualified individuals. As part of this commitment, our agency will assist individuals who have a disability with any reasonable accommodation requests related to employment, including completing the application process, interviewing, completing any pre-employment testing, participating in the employee selection process, and/or to perform essential job functions where the requested accommodation does not impose an undue hardship. If you have a disability and require reasonable accommodation to ensure you have a positive experience applying or interviewing for this position, please direct your inquiries to our ADA Coordinator at OIT_HR@state.co.us or call (303) 764-7900.
This posting may be used to fill multiple vacancies based upon business need.
The Governor's Office of Information Technology does NOT offer sponsored Visas for employment purposes.
Please note that each agency's contact information is different; therefore, we encourage all applicants to view the full, official job announcement which includes contact information and class title. Select the job you wish to view, then click on the "Print" icon.
01
Please detail how your skills and experience align with the requirements of this position.
02
Please describe in detail your risk assessment experience.
03
Please describe how you learned of this job opening.
04
The Governor's Office of Information Technology (OIT) complies with Colorado's Equal Pay for Equal Work Act. While a wide salary range is posted, specific criteria (experience, education, state seniority, etc.) will be used to determine any salary offer. While most salary offers are made within the posted range, occasionally an offer is made below or above the posted range based upon this salary analysis. It is this salary analysis, rather than any negotiation process, that determines any salary offer.
Yes, I acknowledge that it is to my benefit to include ALL of my RELEVANT experience in my application work history and I have done that here.
No, I do not wish to include ALL of my RELEVANT experience, and I understand that this may affect a potential salary offer.
05
All remote work must be performed from within the State of Colorado. If you live out of state and are selected for this position you must relocate to Colorado before commencing employment. There is no form of relocation assistance, financial or otherwise, available for any position. Do you wish to proceed with your submission?
Yes, I understand the above statement.
06
If any of the State of Colorado positions listed in your employment history were performed as a contract employee, you MUST list the position/s, State Agency, and the name of the contracting company by whom you were paid during the contract position. If this does not apply, please @type "N/A".
07
Do you currently require employer sponsorship for a Visa or employer participation in a program for the purposes of immigration status?
Yes
No
08
In the future, will you require employer sponsorship for a Visa or employer participation in a program for the purposes of immigration status?
Yes
No
09
Do you currently reside in the state of Colorado?
Yes
No
Required Question
Employer
State of Colorado
Address
See the full announcement by clicking
the "Printer" icon located above the job title
Location varies by announcement, Colorado, --
Website
https://careers.colorado.gov/
Apply
Please verify your email addressVerify Email
