IT Security & GRC Analyst

Apollo Technology Solutions LLC; Richmond (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

Apollo Technology Solutions LLC in Richmond, VA is seeking an IT Security Analyst to lead risk assessments, governance, and compliance activities for enterprise systems and vendors.

You will collaborate with system and data owners, review third-party security documents, develop security plans, and ensure evidence for authorization and audits. The role requires knowledge of NIST 800-53, HIPAA, PCI, data classification, and incident governance, with in-person collaboration.

Qualifications

• Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
• Experience applying NIST 800-53, VITA SEC530, CIS Controls, CJIS/VCIN, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
• Ability to analyze technical and business information, identify risk, and recommend clear, defensible actions.
• Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, and audit evidence.

Responsibilities

• Conduct security risk assessments, risk analyses, data classifications, privacy reviews, and control assessments for systems and initiatives.
• Maintain risk registers, assessment records, and remediation evidence; track due dates and decisions.
• Review vendor security documentation, SOC reports, questionnaires, MOUs, NDAs, and interconnection docs; identify gaps and escalation needs.
• Coordinate governance for data sharing and interconnection agreements, ensuring least-privilege and incident-notification requirements.
• Prepare executive reporting on governance workload, system inventory, risks, and remediation progress.

Skills

GRC governance

Risk assessment

Policy development

Security controls

NIST 800-53

Vendor risk management

Executive communication

Education

Bachelor's degree in IT Security

Tools

Archer GRC

Job description

Apollo Technology Solutions LLC in Richmond, VA is seeking an IT Security Analyst to lead risk assessments, governance, and compliance activities for enterprise systems and vendors.

You will collaborate with system and data owners, review third-party security documents, develop security plans, and ensure evidence for authorization and audits. The role requires knowledge of NIST 800-53, HIPAA, PCI, data classification, and incident governance, with in-person collaboration.