Cybersecurity GRC Analyst || Richmond, VA || Remote || Contract

Info Origin Inc; Richmond (VA); Remote; USD 63,000 - 77,000; Full time

Job summary

Info Origin Inc. seeks a Cybersecurity GRC Analyst 2 (Remote) for a long-term contract in Richmond, VA. The role supports the enterprise cybersecurity program by managing GRC, risk assessments, privacy reviews, and remediation tracking using Archer GRC.

The candidate will interpret regulatory requirements (NIST SP 800-53, CIS Controls, DoD STIGs, HIPAA, PCI DSS, FERPA) and coordinate audits, policy development, and executive reporting with stakeholders—vendors, auditors, and leadership.

Qualifications

• 5+ years in cybersecurity, information security, IT security governance, or risk management.

Responsibilities

• Manage Governance, Risk and Compliance (GRC) for the enterprise cybersecurity program.
• Conduct security risk assessments and privacy reviews; lead control assessments.
• Maintain risk registers, security documentation, and evidence using Archer GRC and approved tools.
• Interpret/apply frameworks and regulatory requirements (NIST SP 800-53, CIS Controls, HIPAA, PCI DSS, etc.).
• Perform third-party risk assessments, BIAs, data classification, and reviews of data-sharing agreements.

Skills

GRC management

NIST SP 800-53

Security risk assessments

Privacy reviews

Audit readiness

Remediation tracking

Archer GRC

Regulatory compliance

Third-party risk

Executive reporting

Tools

Archer GRC

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity GRC Analyst || Richmond, VA || Remote || Contract

Salary Range: $46.00 To $56.00 Hourly

Job Title : Cybersecurity GRCAnalyst 2 (Remote)

Duration : Long Term Contract

Interview : In-Person only

Job Description:

The Cybersecurity GRCAnalyst 2will support the enterprise cybersecurity program by managing Governance, Risk, and Compliance (GRC), security risk assessments, privacy reviews, control assessments, audit readiness, and remediation tracking. The role involves maintaining risk registers, security documentation, and compliance evidence using Archer GRC and other approved tools.

The analyst will interpret and implement applicable security frameworks and regulatory requirements, including VITA SEC530, NIST SP 800-53, CIS Controls, DoD STIGs, CJIS, VCIN, HIPAA, PCI DSS, FERPA, and FTI. Responsibilities include third-party risk assessments, Business Impact Analyses (BIAs), data classification, security and privacy reviews of data-sharing agreements, and support for incident response and business continuity governance.

The role also includes reviewing emerging technologies and AI initiatives, developing security policies and procedures, coordinating audits, tracking corrective actions, preparing executive compliance reports, and collaborating with technical teams, business owners, vendors, auditors, and leadership to strengthen security and regulatory compliance.

Required Experience:

5+ years in cybersecurity, information security, IT security governance, or risk management.

4+ years applying NIST security frameworks, including NIST SP 800-53.

3+ years in GRC activities, security risk assessments, control assessments, IT audits, and remediation tracking.

5+ years developing security documentation, policies, procedures, assessment reports, and executive summaries.

Experience with Archer GRC or similar platforms, third-party risk management, regulatory compliance, and strong communication and stakeholder management skills.