Information Security Analyst - III

Compunnel, Inc.; Richmond, Northern (VA, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Compunnel, Inc. seeks an Information Security Analyst III to evaluate controls, review policies, and advise on requirements. You will support risk management activities and collaborate with stakeholders to strengthen security posture.

The role requires experience in security assessments, familiarity with standards like NIST and continuous authorization, and effective communication with clients and teams to drive secure outcomes.

Qualifications

• Bachelor's degree or equivalent experience with 3–5+ years in information security.
• Proven experience conducting information security assessments.
• Familiarity with security compliance frameworks and continuous authorization.
• Knowledge of NIST SP 800-37 and NIST SP 800-53/53A.
• Ability to review data and advise on security requirements and best practices.
• Strong risk management understanding for decision making.
• Excellent collaborative and negotiation skills.

Responsibilities

• Evaluate information security controls to identify threats and weaknesses.
• Review policies and procedures to prioritize risks and suggest enhancements.
• Analyze security data and advise stakeholders on changes.
• Support development and integration of new processes.
• Communicate process changes to clients and stakeholders.
• Apply risk management principles to inform decisions.
• Build strong relationships with customers and resources.
• Provide guidance on security requirements and best practices.
• Perform other related duties as assigned.

Skills

Security assessments

Risk management

Stakeholder collaboration

Analytical thinking

Communication

Interpersonal skills

Education

Bachelor's degree in CS/Info Security or related field

Equivalent experience (3–5+ years)

Job description

The Information Security Analyst III will support security compliance and assessment activities by evaluating information security controls, policies, and procedures to identify risks, vulnerabilities, and opportunities for improvement. The role requires experience conducting security assessments, applying risk management practices, and working with compliance frameworks and continuous authorization processes. The analyst will collaborate with stakeholders to review security data, provide guidance on security requirements and best practices, support new process development and integration, and contribute to strengthening the organization’s overall security posture.

Key Responsibilities

• Conduct thorough evaluations of information security controls to identify potential threats, vulnerabilities, and control weaknesses.
• Review security controls, policies, and procedures to prioritize risks and recommend enhancements aligned with organizational security goals.
• Review security-related data and advise stakeholders on best practices and necessary changes to address business and information security requirements.
• Support projects involving the development of new processes and integration of new processes with existing environments.
• Assist in developing and communicating process changes to impacted clients and stakeholders.
• Apply risk management principles to support informed decision-making and contribute to functional area risk management.
• Build strong collaborative and negotiation relationships with customers, stakeholders, and other resources.
• Provide guidance on applicable security requirements and best practices.
• Perform other related duties as assigned.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience with 3–5+ years of relevant work experience.
• Proven experience conducting information security assessments.
• Knowledge of security compliance frameworks and continuous authorization processes.
• Knowledge of NIST SP 800-37 and NIST SP 800-53/53A.
• Experience reviewing security data and advising stakeholders on applicable security requirements and best practices.
• Understanding and application of risk management principles in decision-making.
• Excellent communication and collaboration skills.
• Strong interpersonal, collaboration, and negotiation skills.
• Strong creativity, attention to detail, and analytical capabilities.
• Ability to work effectively with customers and stakeholders to address security and compliance requirements.

Preferred Qualifications

• Experience working in a policy and assurance or quasi-governmental environment.
• Familiarity with cloud service providers and associated security challenges.
• Knowledge of SAFR lifecycle compliance and testing.
• Experience supporting security compliance and assurance programs.
• Ability to build strong interpersonal relationships while demonstrating collaboration, negotiation creativity, attention to detail, and effective communication.