IT Compliance & Cybersecurity Analyst

Commonwealth of VA Careers; Virginia (MN); On-site; USD 95,000 - 105,000; Full time

Job summary

Northern VA Community College in Fairfax County seeks an IT Compliance Analyst to protect digital assets by implementing and monitoring cybersecurity controls and compliance processes. This role ensures IT systems, data practices, and policies meet federal and state regulations and industry standards.

Responsibilities include policy management, third-party risk, risk assessments, security training, and privacy impact assessments, with a focus on FERPA, HIPAA, PCI DSS, GLBA, and CIS Controls.

Qualifications

• Knowledge of cybersecurity policies, standards, and compliance practices.
• Understanding of FERPA, HIPAA, PCI DSS, GLBA, and CIS Controls.
• Ability to review and update policies with version control.
• Experience collecting and validating compliance evidence (e.g., SOC 2, questionnaires).
• Experience delivering security awareness and training programs.

Responsibilities

• Regulatory Compliance & Policy Management: review and version-control cybersecurity policies and documentation.
• Vendor & Third-Party Risk Management: update TPRM policies and processes.
• Cybersecurity Assessments & Internal Controls: track gaps and prepare readiness reports for IT leadership.
• Security Awareness & Compliance Training: develop/deliver training programs and track completion.
• Risk Management & Data Privacy: conduct IT risk assessments and Privacy Impact Assessments.

Skills

Technical reporting

IT cybersecurity

Analytical skills

Cross-functional collaboration

Training program development

Education

Certifications: CompTIA Security+, CompTIA Project+, ITIL 4 Foundation

Tools

KnowBe4

MS Attack Simulator

CIS CSAT

TeamDynamix

Job description

Northern VA Community College in Fairfax County seeks an IT Compliance Analyst to protect digital assets by implementing and monitoring cybersecurity controls and compliance processes. This role ensures IT systems, data practices, and policies meet federal and state regulations and industry standards.

Responsibilities include policy management, third-party risk, risk assessments, security training, and privacy impact assessments, with a focus on FERPA, HIPAA, PCI DSS, GLBA, and CIS Controls.