Information Security Analyst

Stefanini, Inc; Richmond, Northern (VA, KY); Hybrid; USD 163,328,000 - 177,655,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

Stefanini Group is seeking an Information Security Analyst for the Richmond, VA area on a hybrid contract basis. The role requires W2 candidates and offers long-term engagement with a focus on security assessments and risk mitigation.

The ideal candidate holds a bachelor's degree in computer science or information security and brings 3–5+ years of relevant experience, including familiarity with SAFR requirements and NIST SP 800-37/53. Certifications like CISSP/CISA/CISM are desirable.

Qualifications

• Bachelor's degree in computer science, information security, or equivalent experience.
• 3+ years of relevant work experience conducting security assessments.
• Knowledge of compliance frameworks and continuous authorization; prefer NIST SP800-37, SP800-53/53a.
• Certifications such as CISSP, CISA, or CISM are a plus.

Responsibilities

• Conduct thorough evaluations of information security controls to identify threats and vulnerabilities.
• Review security controls, policies, and procedures to prioritize risks and recommend enhancements.
• Advise districts on SAFR requirements and best practices.
• Participate in developing new processes and communicating changes to impacted clients.

Skills

Security assessments

Compliance frameworks

SAFR knowledge

Education

Bachelor's degree in computer science or information security

Job description

Join us to co-create solutions for a better future!

Job Details

Information Technology

Information Security Analyst Richmond, VA Posted: 9/8/2026 Job Description Job ID#: 64841

Job Category: Information Technology

Position Type: Contract

Duration: Long Term

Shift: 1

Remaining Positions: 2

Stefanini Group is hiring! Stefanini is looking for an Information Security Analyst for Richmond, VA location (Hybrid).

W2 candidates only!

Position Overview

The Security Control Assessor plays an integral role in ensuring that an organization's information systems are evaluated for security risks and vulnerabilities, aligning with established information security policy and standards. This position involves a thorough examination of security controls, policies, and procedures to identify any weaknesses that could potentially be exploited. By conducting comprehensive assessments, the Security Certification Assessor provides essential insights and recommendations to enhance the security posture of the organization. Their expertise supports the development of strategies to mitigate identified risks, ensuring the protection of sensitive information and the integrity of IT systems. Through their work, the company is better equipped to navigate the complex landscape of cybersecurity threats, maintaining compliance with SAFR requirements, and safeguarding assets.

Responsibilities

• Conduct thorough evaluations of information security controls to identify potential threats and vulnerabilities to the Systems information systems.
• The process includes a detailed review of security controls, policies, and procedures to prioritize risks and recommend enhancements that support organizational security goals.
• Reviews data and assists in advising districts on best practices and how to implement the necessary changes to address their business and information security needs.
• Key participant in project development surrounding new processes and the integrating of new processes with existing ones. Assists in developing communications of these changes to impacted clients and other resources.
• Performs other related duties as assigned.

Working Conditions

• Will require the use of standard office equipment such as computers, phones, photocopiers, etc.
• Physical Demands: Requires some degree of sitting (for prolonged periods of time), standing, lifting carrying, pushing, pulling less than 20 lbs.

Job Requirements Details

Hours of Work

• May require extended work hours. The ideal candidate will work a hybrid schedule and be in a district office two days a week. Occasional travel including overnight stays may be necessary.

Required Qualifications

• Bachelor's degree in computer science, Information Security, or equivalent experience with 3 to 5+ years of relevant work experience
• Proven experience with conducting security assessments
• Knowledge of compliance frameworks and continuous authorization processes. Prefer NIST SP800-37, SP800-53/53a.
• Excellent communication skills and the ability to work collaboratively.
• Reviewing data and advising customers on SAFR requirements and best practices
• Building strong collaboration and negotiation relationships
• Poses creativity, attention to detail
• Understands and applies the risk management discipline in decision making and contributes to the functional area's risk management.

Preferred Qualifications

• Certifications such as CISSP, CISA, CISM.
• Experience in a policy and assurance or quasi-governmental environment
• Familiarity with cloud service providers and associated security challenges
• Knowledge of SAFR lifecycle compliance and testing
• The candidate must possess skills that include experience with:
• Reviewing data and advising customers on SAFR requirements and best practices
• Building strong interpersonal collaboration, negotiation, creativity, attention to detail, and communication relationships

Pay Range

$ 57.00 - $ 62.00

About Stefanini Group

The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than four hundred clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence. We are CMM Level 5 company.

Listed salary ranges may vary based on experience, qualifications, and local market. Also, some positions may include bonuses or other incentives.

Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face‑to‑face conversations will involve a description of the job for which you have applied. We also speak with you about the process including interviews and job offers.