IT Security Governance, Risk & Compliance

Skywalk Global; Richmond (VA); On-site; USD 83,000 - 138,000; Full time

Job summary

Skywalk Global is seeking an IT Security Governance, Risk & Compliance (GRC) Analyst for a 6-month contract in Virginia. The role focuses on implementing and monitoring information security controls, and supporting CJIS, VCIN, HIPAA, PCI-DSS, FERPA, or FTI requirements.

The ideal candidate has hands-on experience with NIST SP 800-53, third-party risk management, BIAs, and security documentation, plus strong communication with auditors and leadership to drive compliance initiatives.

Qualifications

• These qualifications would strengthen a candidate's application but would not be mandatory.

Skills

VITA SEC 530

Third-Party Risk Mgmt

Business Impact Analysis

Regulatory Compliance

Privacy and Data Sharing

Incident Response and Continuity Gov

AI and Emerging Technology Governance

NIST SP 800-53

Security control assessments

Security documentation

Communication skills

Project management

Job description

IT Security Governance, Risk & Compliance (GRC) Analyst

Job Type

Contractor

Primary Skills

Security Analyst

Duration

6 months

Job Summary

Thesequalificationswouldstrengthenacandidate'sapplicationbutwouldnotbemandatory.

ExperienceandSkills

• VITASEC530:2+yearsofexperienceapplyingCommonwealthofVirginiainformationsecurityrequirements.
• Third-PartyRiskManagement:3+yearsreviewingvendorsecuritydocumentation,SOCreports,andsecurityquestionnaires.
• BusinessImpactAnalysis:3+yearsconductingBIAs,dataclassificationreviews,andsecurityfeasibilityassessments.
• RegulatoryCompliance:3+yearsworkingwithCJIS,VCIN,HIPAA,PCIDSS,FERPA,orFTIrequirements.
• PrivacyandDataSharing:2+yearsreviewingdata-sharingagreements,MOUs,andsecurity/privacyobligations.
• IncidentResponseandContinuityGovernance:2+yearssupportingincidentresponse,disasterrecovery,orbusinesscontinuitycompliance.
• AIandEmergingTechnologyGovernance:1+yearassessingsecurity,privacy,andcompliancerisksassociatedwithemergingtechnologies.

Skills:

experienceapplyingNISTsecurityframeworks,includingNISTSP800-53.Required4Years

experienceconductingsecuritycontrolassessmentsandsupportingITaudits.Required3Years

Experiencedevelopingsecuritydocumentation,policies,procedures,assessmentreports,andexecutivesummaries.Required5Years

Strongwrittenandverbalcommunicationskillswithtechnicalteams,businessowners,auditors,andleadership.Required3Years

Abilitytomanagemultiplesecurityassessments,complianceactivities,andcompetingdeadlines.Required3Years