Hybrid Information Security Risk & Compliance Analyst

DHRM; Richmond (VA); Hybrid; USD 85,000 - 110,000; Full time

Benefits offered by this job

Telework up to 2 days/week

Job summary

The Virginia Department of the Treasury is seeking an Information Security Risk and Compliance Analyst to support cybersecurity and risk management across the Commonwealth's financial systems. This mid-level role focuses on compliance, risk assessments, and governance within a government environment.

You will contribute to security testing, awareness campaigns, and policy documentation, while coordinating audits and delivering leadership-ready reports and dashboards.

Qualifications

• Understanding of cybersecurity principles and practices.
• Knowledge of NIST security frameworks and compliance standards.
• Experience developing System Security Plans and security documentation.
• Excellent written communication and analytical skills.

Responsibilities

• Create and maintain System Security Plans with aligned acceptance criteria.
• Develop security training materials and campaigns for awareness programs.
• Identify threats, perform risk assessments, and track remediation actions.
• Coordinate audits and maintain governance, policies, and security dashboards.

Skills

Cybersecurity fundamentals

NIST frameworks

RBAC & least privilege

MFA & SSO familiarity

Strong written skills

Education

Bachelor's degree in IT or related field

Tools

Archer

Job description

The Virginia Department of the Treasury is seeking an Information Security Risk and Compliance Analyst to support cybersecurity and risk management across the Commonwealth's financial systems. This mid-level role focuses on compliance, risk assessments, and governance within a government environment.

You will contribute to security testing, awareness campaigns, and policy documentation, while coordinating audits and delivering leadership-ready reports and dashboards.