Sr. Governance, Risk and Compliance Analyst

OpenGov is the leader in AI and ERP solutions for local and state governments in the U.S. More than 2,000 cities, counties, state agencies, school districts, and special districts rely on the OpenGov Public Service Platform to operate efficiently, adapt to change, and strengthen the public trust. Category-leading products include enterprise asset management, procurement and contract management, accounting and budgeting, billing and revenue management, permitting and licensing, and transparency and open data. These solutions come together in the OpenGov ERP, allowing public sector organizations to focus on priorities and deliver maximum ROI with every dollar and decision in sync. Learn about OpenGov’s mission to power more effective and accountable government and the vision of high-performance government for every community at

JOB SUMMARY:

Own and mature OpenGov’s core GRC programs across audit/compliance, risk, vendor security, and security awareness. Lead end-to-end SOC 2 audit cycles, drive multi-framework control mapping (SOC 2, NIST 800-53/CSF, ISO 27001; StateRAMP/TX-RAMP/FedRAMP exposure strongly preferred), and partner with Security Operations, IT, Engineering, Legal, and Customer teams to reduce risk and maintain certifications. Mentor junior analysts and raise the bar on control quality, evidence automation, and measurable outcomes.

RESPONSIBILITIES:

- Lead planning, scoping, walkthroughs, sampling, and issue closure for SOC 2; coordinate external auditors and internal control owners; drive on-time, predictable delivery.

- Design/upgrade controls for SaaS/cloud environments; define test plans, perform operating effectiveness tests, and implement continuous control monitoring; close gaps with accountable owners.

- Multi-Framework Mapping: Maintain crosswalks (SOC 2 ↔ NIST 800-53/CSF ↔ ISO 27001; align where applicable with GovRAMP/TX-RAMP/FedRAMP).

- Run risk assessments (inherent/residual scoring, KRIs), keep...