IT Security Analyst -Archer GRC

My3tech-Inc; Richmond (VA); Vor Ort; USD 90.000 - 130.000; Vollzeit

Zusammenfassung

My3tech-Inc seeks a seasoned GRC professional to oversee security risk assessments, regulatory compliance, and executive reporting. You will apply NIST SP 800-53, review risk controls, and coordinate with auditors and business units to strengthen governance and security posture.

Responsibilities include creating security documentation, coordinating incident response, and delivering metrics and executive summaries to leadership. Experience with Archer GRC is a plus.

Qualifikationen

• 5+ years of experience performing security risk assessments, compliance reviews, or GRC activities.
• 3+ years applying NIST security frameworks, including NIST SP 800-53.
• 4+ years conducting security control assessments and supporting IT audits.
• 3+ years maintaining risk registers, documenting findings, and tracking corrective actions.

Aufgaben

• Develop and maintain security documentation, policies, procedures, assessment reports, and executive summaries.
• Support incident response, disaster recovery, or business continuity governance.
• Prepare security metrics, compliance reports, risk summaries, and management briefings.
• Review vendor security documentation, SOC reports, and security questionnaires.

Kenntnisse

Security risk assessments

Regulatory compliance

GRC

Executive reporting

NIST SP 800-53

Tools

Archer GRC

Jobbeschreibung

Experience and SkillsArcher GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements.Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.experience in cybersecurity, information security, IT security governance, or risk management.Required5Yearsexperience performing security risk assessments, compliance reviews, or GRC activities.Required3Yearsexperience applying NIST security frameworks, including NIST SP 800-53.Required4Yearsexperience conducting security control assessments and supporting IT audits.Required3Yearsexperience maintaining risk registers, documenting findings, and tracking corrective actions.Required3Years6. Experience developing security documentation, policies, procedures, assessment reports, and executive summaries.Required5YearsStrong written and verbal communication skills with technical teams, business owners, auditors, and leadership.Required3YearsAbility to manage multiple security assessments, compliance activities, and competing deadlines.Required3Years