Information Security Compliance

Insight Global; Richmond (VA); On-site; USD 51,000 - 55,000; Full time

Job summary

Insight Global seeks a Cyber Governance Analyst to support information security governance, awareness programs, and policy administration. This role emphasizes governance, training, and compliance rather than hands-on engineering, with focus on improving security education across the organization.

The position offers engagement for Security Awareness Month and ongoing governance enhancements, collaborating with stakeholders to promote a strong security culture and effective data protection

Qualifications

• Experience supporting governance, risk, compliance, or information security programs.
• Ability to develop and promote security awareness and training initiatives.
• Knowledge of information security policies and regulatory requirements.

Responsibilities

• Review and update information security policies, standards, and procedures.
• Promote organizational security awareness and education programs.
• Develop and deliver cybersecurity training content (phishing, data protection, best practices).
• Drive employee engagement and ongoing security education initiatives.
• Support Security Awareness Month campaigns and related initiatives.
• Partner with stakeholders to ensure policy adherence.
• Assist in implementing and monitoring security controls.
• Support data classification and labeling using Microsoft Purview.
• Research trends to recommend program enhancements.
• Provide support for security compliance tools and technologies.
• Ensure programs align with regulations and frameworks.
• Contribute recommendations for future enhancements and modernization.

Skills

Cybersecurity governance

Policy governance

Security awareness training

Clear communication

Project coordination

Independent work

Stakeholder collaboration

Tools

Microsoft Purview

Microsoft 365 Security & Compliance

KnowBe4

Job description

Job Description

Position Overview

We are seeking a Cyber Governance Analyst to support the organization's Information Security and Technology Governance initiatives. This individual will play a key role in maintaining and enhancing the organization's security awareness, policy governance, and compliance programs.

The ideal candidate will have experience administering and promoting cybersecurity awareness programs, updating security policies and standards, supporting compliance initiatives, and fostering a culture of security across the organization. This role is focused on governance, awareness, training, and policy administration rather than hands-on security engineering or development.

This engagement will provide immediate support for Security Awareness Month initiatives while helping drive long-term improvements in organizational security education, policy management, and data governance practices.

Key Responsibilities

• Review, develop, and update information security policies, standards, and procedures in alignment with regulatory requirements and industry best practices.
• Promote and maintain organizational security awareness and education programs.
• Develop and deliver cybersecurity training content focused on topics such as phishing prevention, data protection, and security best practices.
• Drive employee engagement and ongoing security education initiatives throughout the organization.
• Support Security Awareness Month campaigns and related organizational initiatives.
• Partner with stakeholders to ensure adherence to established security policies and governance standards.
• Assist in implementing and monitoring security controls across the organization.
• Support data classification and labeling efforts utilizing Microsoft Purview.
• Research emerging cybersecurity governance, compliance, and awareness trends to recommend program enhancements.
• Provide support for security compliance tools and technologies, ensuring effective operation and continuous improvement.
• Help ensure security programs and practices align with applicable regulations, standards, and frameworks.
• Contribute recommendations for future enhancements and modernization of the security awareness and governance program.

Ideal Candidate Profile

The ideal candidate is a cybersecurity governance professional who enjoys driving awareness, education, and policy compliance initiatives. They are passionate about creating a strong security culture, developing engaging training programs, and ensuring employees understand their role in protecting organizational data and systems.

They do not need to be a security engineer or developer, but should be comfortable managing governance activities, collaborating with stakeholders, and continuously improving security awareness and compliance efforts.

Pay ranges from $37-40/hr

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail]. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

Required Qualifications

• Experience supporting cybersecurity governance, risk, compliance, or information security programs.
• Experience developing, administering, or promoting security awareness and training initiatives.
• Knowledge of information security policies, standards, and regulatory compliance requirements.
• Experience creating, updating, and managing security documentation and policies.
• Strong communication and presentation skills with the ability to engage both technical and non-technical audiences.
• Ability to work independently and collaborate across multiple business units.
• Strong organizational and project coordination skills.

Technologies

• Microsoft Purview (Data Classification & Labeling)
• Microsoft 365 Security & Compliance
• KnowBe4

PhishER Preferred Qualifications

• Experience with Microsoft Purview, specifically data classification and labeling.
• Experience with security awareness platforms such as KnowBe4.
• Experience with PhishER or similar phishing response and awareness tools.
• Familiarity with Microsoft 365 security and compliance capabilities.
• Experience supporting government, public sector, or highly regulated environments.
• Understanding of security frameworks and best practices (NIST, CIS, ISO 27001, etc.).