InfoSec Compliance & Risk Analyst III

Compunnel, Inc.; Richmond, Northern (VA, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Compunnel, Inc. seeks an Information Security Analyst III to evaluate controls, review policies, and advise on requirements. You will support risk management activities and collaborate with stakeholders to strengthen security posture.

The role requires experience in security assessments, familiarity with standards like NIST and continuous authorization, and effective communication with clients and teams to drive secure outcomes.

Qualifications

• Bachelor's degree or equivalent experience with 3–5+ years in information security.
• Proven experience conducting information security assessments.
• Familiarity with security compliance frameworks and continuous authorization.
• Knowledge of NIST SP 800-37 and NIST SP 800-53/53A.
• Ability to review data and advise on security requirements and best practices.
• Strong risk management understanding for decision making.
• Excellent collaborative and negotiation skills.

Responsibilities

• Evaluate information security controls to identify threats and weaknesses.
• Review policies and procedures to prioritize risks and suggest enhancements.
• Analyze security data and advise stakeholders on changes.
• Support development and integration of new processes.
• Communicate process changes to clients and stakeholders.
• Apply risk management principles to inform decisions.
• Build strong relationships with customers and resources.
• Provide guidance on security requirements and best practices.
• Perform other related duties as assigned.

Skills

Security assessments

Risk management

Stakeholder collaboration

Analytical thinking

Communication

Interpersonal skills

Education

Bachelor's degree in CS/Info Security or related field

Equivalent experience (3–5+ years)

Job description

Compunnel, Inc. seeks an Information Security Analyst III to evaluate controls, review policies, and advise on requirements. You will support risk management activities and collaborate with stakeholders to strengthen security posture.

The role requires experience in security assessments, familiarity with standards like NIST and continuous authorization, and effective communication with clients and teams to drive secure outcomes.