Hybrid Information Security Analyst: GRC & Policy

ASCENDING; Richmond (VA); Hybrid; USD 85,000 - 120,000; Full time

Job summary

ASCENDING in Richmond, VA is seeking an Information Security Analyst for a 2-year contract. The role is hybrid in Richmond with 2–3 days onsite and supports information security across Virginia Housing programs and IT systems.

The analyst will assist in cybersecurity awareness, help govern information security policies, and collaborate with the ISO on security projects, risk assessments, and privacy compliance.

Qualifications

• 3 years of experience in Information Security governance, risk, and compliance.
• Knowledge of information security principles and IT infrastructure management.
• Familiarity with NIST, ISO 27001, and COBIT.
• Ability to draft Information Security and Privacy policies and procedures.
• Strong written communication and attention to detail.

Responsibilities

• Participate in Information Security and Privacy efforts across all business areas and vendor engagements to ensure security controls.
• Work within a Governance, Risk, and Compliance system to update information security records.
• Partner with stakeholders to develop and maintain Information System Security Plans (SSP).
• Represent the Information Security Office in PMO-led projects to ensure ISO involvement.
• Collaborate to understand business challenges and develop compliant, value-adding solutions.
• Assist in developing and maintaining information security standards and processes.
• Assist with controls documentation, including diagramming risk templates and control narratives.
• Review contracts, agreements, and vendor documentation for information security protections.

Skills

InfoSec governance

InfoSec concepts

IT infrastructure

NIST framework

ISO 27001

COBIT

Attention to detail

Adaptability

Policy drafting

Security documentation

Contract terms

Diagrams & flowcharts

Written communication

Education

Bachelor's degree in Computer Science or Information Systems

CISA

CISSP

Job description

ASCENDING in Richmond, VA is seeking an Information Security Analyst for a 2-year contract. The role is hybrid in Richmond with 2–3 days onsite and supports information security across Virginia Housing programs and IT systems.

The analyst will assist in cybersecurity awareness, help govern information security policies, and collaborate with the ISO on security projects, risk assessments, and privacy compliance.