IT Security Governance & Risk Analyst (Remote - VA)

RICEFW Technologies Inc; United States; Remoto; USD 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

RICEFW Technologies Inc. is seeking an IT Security Governance Analyst to support the Virginia Department of Corrections enterprise cybersecurity program by administering governance, risk, compliance, privacy, and security assurance activities.

This remote role requires residency in Virginia or nearby for on-site meetings as needed. The analyst will conduct risk assessments, maintain risk registers, review third-party security, and develop security policies and executive reporting to support

Competenze

• Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
• Knowledge of security frameworks and standards such as NIST, VITA SEC530, CJIS/VCIN, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
• Ability to analyze technical and business information, identify risk, and recommend actions.
• Ability to develop and maintain professional documentation, including risk assessments, policies, and reports.

Mansioni

• Conduct and coordinate security risk assessments, BIAs, data classifications, privacy reviews, control assessments, and security feasibility reviews.
• Maintain risk registers, assessment records, corrective-action plans, exceptions, and evidence repositories.
• Review vendor and third-party security documentation (SOC reports, questionnaires, contracts, MOUs, NDAs) for gaps and escalation needs.
• Coordinate audit, assessment, and oversight activities; collect and validate evidence; manage corrective actions through closure.
• Develop, maintain, and communicate security policies, standards, and governance processes.

Conoscenze

Cybersecurity GRC

NIST Controls

Archer GRC

VITA SEC530

Third-Party Risk

Governance & Compliance

Regulatory Compliance

Strumenti

Archer GRC

Descrizione del lavoro

RICEFW Technologies Inc. is seeking an IT Security Governance Analyst to support the Virginia Department of Corrections enterprise cybersecurity program by administering governance, risk, compliance, privacy, and security assurance activities.

This remote role requires residency in Virginia or nearby for on-site meetings as needed. The analyst will conduct risk assessments, maintain risk registers, review third-party security, and develop security policies and executive reporting to support