IT Security Governance Analyst: Risk & Compliance

Info Origin Inc; Virginia; On-site; USD 70,000 - 100,000; Full time

Job summary

Info Origin Inc. is seeking an IT Security Analyst to support the enterprise cybersecurity program by administering governance, risk, compliance, privacy, and security assurance activities.

The role involves coordinating risk assessments, maintaining evidence repositories, and ensuring compliance with NIST, CJIS, HIPAA, PCI, FERPA, and other requirements. The position requires collaboration with system owners, data owners, and vendors to document security plans, assess control effectiveness,

Qualifications

• Experience with Archer GRC and risk management platforms.
• Strong knowledge of NIST 800-53 controls and related frameworks.
• Ability to analyze risks and define mitigations for governance programs.
• Experience supporting security audits and remediation tracking.
• Experience reviewing vendor security documentation and third-party risk.
• Experience with data classification, privacy reviews, and BIA.
• Familiarity with CJIS/VCIN, HIPAA, PCI, FERPA, FTI requirements.

Responsibilities

• Administer governance, risk, compliance, privacy, and security assurance activities.
• Maintain risk registers, corrective-action plans, and evidence repositories.
• Apply NIST 800-53, SEC530, CIS Controls, DoD STIGs, and privacy requirements.
• Collaborate with system owners to classify information and document security plans.
• Review vendor and third-party security documentation and contracts.
• Support interconnection governance and data-sharing agreements for security and privacy.
• Coordinate audit and oversight activities; manage corrective actions to closure.
• Develop and communicate security policies, standards, and governance templates.
• Support security awareness and targeted compliance training for stakeholders.
• Perform governance reviews for AI initiatives and emerging tech security.
• Assist with continuity, incident response, disaster recovery, and audit logging governance.
• Prepare executive and management reporting on governance workload, risks, and remediation.
• Provide security guidance to project teams and vendors; escalate issues.
• Participate in incident and post-incident governance activities.
• Perform other related duties in support of IT Security Governance.
• Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
• Knowledge of security frameworks and standards such as NIST 800-53, SEC530, CIS Controls, CJIS and VCIN, HIPAA, PCI, FERPA, FTI.
• Ability to analyze technical and business information and recommend actions.
• Ability to develop professional documentation and audit evidence.
• Ability to manage multiple complex assignments and communicate with executives.

Skills

Archer GRC

NIST 800-53

Risk Management

Audits

Third-Party Risk

Data Classification

Privacy

Job description

Info Origin Inc. is seeking an IT Security Analyst to support the enterprise cybersecurity program by administering governance, risk, compliance, privacy, and security assurance activities.

The role involves coordinating risk assessments, maintaining evidence repositories, and ensuring compliance with NIST, CJIS, HIPAA, PCI, FERPA, and other requirements. The position requires collaboration with system owners, data owners, and vendors to document security plans, assess control effectiveness,