Hybrid InfoSec Analyst: Security Controls & Assessments

Stefanini, Inc; Richmond, Northern (VA, KY); Hybrid; USD 163,328,000 - 177,655,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

Stefanini Group is seeking an Information Security Analyst for the Richmond, VA area on a hybrid contract basis. The role requires W2 candidates and offers long-term engagement with a focus on security assessments and risk mitigation.

The ideal candidate holds a bachelor's degree in computer science or information security and brings 3–5+ years of relevant experience, including familiarity with SAFR requirements and NIST SP 800-37/53. Certifications like CISSP/CISA/CISM are desirable.

Qualifications

• Bachelor's degree in computer science, information security, or equivalent experience.
• 3+ years of relevant work experience conducting security assessments.
• Knowledge of compliance frameworks and continuous authorization; prefer NIST SP800-37, SP800-53/53a.
• Certifications such as CISSP, CISA, or CISM are a plus.

Responsibilities

• Conduct thorough evaluations of information security controls to identify threats and vulnerabilities.
• Review security controls, policies, and procedures to prioritize risks and recommend enhancements.
• Advise districts on SAFR requirements and best practices.
• Participate in developing new processes and communicating changes to impacted clients.

Skills

Security assessments

Compliance frameworks

SAFR knowledge

Education

Bachelor's degree in computer science or information security

Job description

Stefanini Group is seeking an Information Security Analyst for the Richmond, VA area on a hybrid contract basis. The role requires W2 candidates and offers long-term engagement with a focus on security assessments and risk mitigation.

The ideal candidate holds a bachelor's degree in computer science or information security and brings 3–5+ years of relevant experience, including familiarity with SAFR requirements and NIST SP 800-37/53. Certifications like CISSP/CISA/CISM are desirable.