IT Security Governance Analyst || Richmond, VA || Remote

Info Origin Inc; Richmond (VA); Remote; USD 62,000 - 69,000; Full time

Job summary

Info Origin Inc in Richmond, VA is seeking an experienced IT Security Governance Analyst to support cybersecurity governance, risk management, compliance, and audit activities. The role involves assessing security risks, reviewing compliance with standards, maintaining risk records, and coordinating remediation with IT teams and business stakeholders.

The ideal candidate will apply frameworks such as NIST SP 800-53, review vendor security documentation, and prepare risk summaries and briefings.

Qualifications

• 5+ years of experience in cybersecurity, information security, IT security governance, or risk management.
• 3+ years of experience performing security risk assessments, compliance reviews, or GRC activities.
• 4+ years of experience applying NIST security frameworks, including NIST SP 800-53.
• 3+ years of experience conducting security control assessments, supporting IT audits, and tracking remediation activities.
• 5+ years of experience preparing security documentation, policies, procedures, and assessment reports.

Responsibilities

• Conduct security risk assessments, control reviews, and compliance assessments.
• Maintain risk registers, assessment records, audit evidence, and corrective-action plans.
• Apply security frameworks such as NIST SP 800-53 and relevant regulatory requirements.
• Review vendor security questionnaires, SOC reports, and third-party security documentation.
• Support IT audits, privacy reviews, data classification, and security policies and procedures.
• Prepare compliance reports, risk summaries, and management briefings.
• Coordinate security awareness training and evaluate risks associated with emerging technologies and AI.

Skills

Security governance

Risk assessment

Compliance reviews

GRC practices

Regulatory awareness

Tools

Archer GRC

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

IT Security Governance Analyst || Richmond, VA || Remote

2 days ago Requisition ID: 2323

Salary Range: $45.00 To $50.00 Hourly

IT Security Governance Analyst || Richmond, VA || Remote || Contract || In-Person Interview

Job Summary

We are seeking an experienced IT Security Governance Analyst to support cybersecurity governance, risk management, compliance, and audit activities. The ideal candidate will assess security risks, review compliance with security standards, maintain risk documentation, and coordinate remediation activities across IT teams and business stakeholders.

Key Responsibilities

Conduct security risk assessments, control reviews, and compliance assessments.

Maintain risk registers, assessment records, audit evidence, and corrective-action plans.

Apply security frameworks such as NIST SP 800-53 and relevant regulatory requirements.

Review vendor security questionnaires, SOC reports, and third-party security documentation.

Support IT audits, privacy reviews, data classification, and security policies and procedures.

Prepare compliance reports, risk summaries, and management briefings.

Coordinate security awareness training and evaluate risks associated with emerging technologies and AI.

Required Qualifications

5+ years of experience in cybersecurity, information security, IT security governance, or risk management.

3+ years of experience performing security risk assessments, compliance reviews, or GRC activities.

4+ years of experience applying NIST security frameworks, including NIST SP 800-53.

3+ years of experience conducting security control assessments, supporting IT audits, and tracking remediation activities.

5+ years of experience preparing security documentation, policies, procedures, and assessment reports.

Strong communication, analytical, documentation, and organizational skills.

Preferred Qualifications

Experience with Archer GRC or similar GRC platforms.

Knowledge of VITA SEC530, CIS Controls, CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI.

Experience in third-party risk management, business impact analysis, privacy reviews, and AI governance.