IT Security GRC Analyst II - Remote

Novalink Solutions LLC; Richmond (VA); Híbrido; USD 70.000 - 100.000; Jornada completa

Descripción de la vacante

Novalink Solutions LLC is seeking an IT Security Analyst 2 for a hybrid role based in Richmond, VA, with remote flexibility. You will conduct risk assessments, maintain risk registers, and ensure compliance with NIST, CJIS, HIPAA, and other regulatory requirements.

Collaboration with system owners and auditors is essential to drive remediation and secure data flows. You will develop security documentation, support awareness programs, and guide project teams on security controls, governance, and

Formación

• Knowledge of cybersecurity governance, risk management, compliance, privacy, third‑party risk, and audit practices.
• Knowledge of security frameworks and standards such as NIST 800-53, VITA SEC530, CIS Controls, CJIS/VCIN, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
• Ability to analyze technical and business information, identify risk, distinguish control gaps from residual risk, and recommend actions.
• Ability to develop and maintain professional documentation including assessment reports, risk registers, security plans, policies, procedures, and audit evidence.
• Ability to manage multiple complex assignments, prioritize under deadlines, and coordinate with many stakeholders.
• Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical partners.
• Ability to handle sensitive information with sound judgment, discretion, and service mindset.

Responsabilidades

• Conduct and coordinate security risk assessments, BIAs, data classifications, privacy reviews, control assessments, and security feasibility reviews for systems and initiatives.
• Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and tracking in Archer GRC and other tools.
• Review and apply Commonwealth and agency requirements including NIST, CJIS, HIPAA, PCI, FERPA, FTI, and privacy obligations.
• Collaborate with system and data owners to document ownership, classify information, and maintain security plans and controls for authorization and audits.
• Review vendor/3rd‑party security documentation (SOC reports, security questionnaires, data‑flow details, NDAs) for gaps and controls.
• Support governance of interconnection and data sharing; review MOUs/agreements for security, least privilege, access, and incident-notification rules.
• Coordinate audits/assessments; collect evidence; respond to inquiries; manage corrective actions through closure with auditors and reviewers.
• Develop and communicate security policies, standards, procedures, guidelines, templates, and governance processes; propose improvements.
• Support security awareness/training programs with targeted training, tracking, and reporting for owners and staff.
• Perform governance reviews for AI/emerging tech; evaluate purpose, data, privacy, and vendor assurances; document outcomes.

Conocimientos

Governance & risk

Security frameworks

Risk analysis

Documentation

Project management

Executive communication

Data sensitivity & privacy

Descripción del empleo

Novalink Solutions LLC is seeking an IT Security Analyst 2 for a hybrid role based in Richmond, VA, with remote flexibility. You will conduct risk assessments, maintain risk registers, and ensure compliance with NIST, CJIS, HIPAA, and other regulatory requirements.

Collaboration with system owners and auditors is essential to drive remediation and secure data flows. You will develop security documentation, support awareness programs, and guide project teams on security controls, governance, and