IT Security & GRC Analyst

Novalink Solutions; Richmond (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

Novalink Solutions is seeking an IT Security Analyst 2 to perform governance, risk assessments, and compliance activities across agency systems and vendors. You will lead evidence collection, control evaluations, and remediation tracking while coordinating with system owners and auditors.

The role emphasizes data handling, privacy reviews, and adherence to NIST, CJIS, and HIPAA requirements, with collaboration across technical and nontechnical stakeholders. On-site Richmond VA position.

Qualifications

• Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
• Familiarity with security frameworks and standards (NIST 800-53, CIS Controls, HIPAA, PCI, FERPA).
• Ability to analyze risk, identify control gaps, and propose defensible actions.
• Ability to document assessments, risk registers, and audit evidence.
• Experience coordinating with executives, auditors, and technical teams.

Responsibilities

• Conduct security risk assessments, data classifications, privacy reviews, and control assessments.
• Maintain risk registers, remediation tracking, and evidence repositories across tools.
• Review vendor security documentation and interconnection agreements for gaps.
• Develop security policies, standards, and governance templates.
• Support governance reviews for AI initiatives and emerging technologies.
• Prepare executive reporting on risks, findings, and remediation progress.

Skills

Cybersecurity governance

Risk management

Privacy and compliance

Audit practices

Vendor risk management

Communication with executives

Job description

Novalink Solutions is seeking an IT Security Analyst 2 to perform governance, risk assessments, and compliance activities across agency systems and vendors. You will lead evidence collection, control evaluations, and remediation tracking while coordinating with system owners and auditors.

The role emphasizes data handling, privacy reviews, and adherence to NIST, CJIS, and HIPAA requirements, with collaboration across technical and nontechnical stakeholders. On-site Richmond VA position.