Hybrid InfoSec Analyst: GRC, Policies & Privacy

ascendingdc; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Virginia Housing is seeking an Information Security Analyst for a 2-year contract, hybrid in Richmond, VA (2-3 days onsite). The role supports information security across all programs, IT systems, and applications, helping develop and maintain security policies.

You will work with the Information Security Office on security and privacy projects, risk and compliance, and collaborate with stakeholders to implement controls and documentation.

Qualifications

• At least 3 years of demonstrated experience in information security concepts related to governance, risk, and compliance.
• Extensive knowledge of information security principles and practices.
• Deep understanding of methods applied to information technology infrastructure planning, implementation, and management.
• Familiarity with security frameworks such as NIST, ISO 27001, or COBIT.
• Experience drafting Information Security and Privacy policies, standards, and procedures.
• Strong written communication skills for conveying complex security concepts.
• Ability to interpret security documentation, including flow diagrams and process maps.

Responsibilities

• Participate in Information Security and Privacy efforts across all business areas and vendor engagements to ensure that appropriate security controls are in place and adhered to by all parties.
• Work within a Governance, Risk, and Compliance (GRC) system to add and update information security records and documentation.
• Partner with business stakeholders to develop and maintain Information System Security Plans (SSP).
• Represent the Information Security Office in PMO-led projects to ensure significant projects have appropriate ISO representation.
• Collaborate across teams to understand business challenges, develop tailored solutions that provide value, facilitate compliance, and ensure clear communication.
• Assist in the development and maintenance of information security standards and processes, including conducting research as needed.
• Assist with controls documentation, including information system diagramming, populating risk assessment templates, and drafting control narrative documentation for business approval.
• Review contracts, agreements, and vendor documentation to ensure adequate information security protections in place.

Skills

Information security

Governance, risk, and compliance

Security principles

Infrastructure planning

Written communication

Adaptability

Education

Bachelor's degree

CISA

CISSP

Job description

Virginia Housing is seeking an Information Security Analyst for a 2-year contract, hybrid in Richmond, VA (2-3 days onsite). The role supports information security across all programs, IT systems, and applications, helping develop and maintain security policies.

You will work with the Information Security Office on security and privacy projects, risk and compliance, and collaborate with stakeholders to implement controls and documentation.