Remote IT Security Analyst II – GRC & Compliance

Yakshna Solutions, Inc.; Herndon (VA); À distance; USD 75 000 - 80 000; Plein temps

Avantages offerts par ce poste

401(k)

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Paid time off

Training and professional development

Résumé du poste

Yakshna Solutions, Inc. is seeking an IT Security Analyst 2 to support the Department of Corrections in Richmond, VA.

This remote-friendly role requires strong governance, risk management, and compliance experience to assess threats, document controls, and ensure regulatory alignment. You will coordinate risk assessments, track remediation, review vendor security documentation, and help develop security policies and awareness programs across IT teams and stakeholders.

Qualifications

• Experience in governance, risk management, compliance, privacy, third-party risk, and audit practices.
• Familiarity with NIST 800-53, VITA SEC530, CIS Controls, CJIS/VCIN, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
• Ability to analyze technical and business information, identify risk, and recommend clear actions.
• Ability to develop and maintain professional documentation including assessment reports, risk registers, security plans, and audit evidence.
• Ability to manage multiple complex assignments with deadlines and coordinate with many stakeholders.
• Strong communication with executives, technical teams, vendors, auditors, and nontechnical partners.

Responsabilités

• Conduct security risk assessments, data classifications, and control assessments for systems and initiatives.
• Maintain risk registers, assessment records, corrective-action plans, and evidence repositories.
• Review vendor and third-party security documentation, including SOC reports, architecture data flow, and NDAs; identify gaps and escalation needs.
• Coordinate audit, assessment, and governance activities; collect evidence and manage remediation through closure.
• Develop and communicate security policies, standards, and governance processes; suggest improvements.
• Support security awareness and training programs for system owners and staff.
• Perform governance reviews for AI initiatives; evaluate privacy, security, and compliance risks.

Connaissances

Cybersecurity governance

Risk management

Compliance

Privacy

Third-party risk

Audit practices

Archer GRC

Outils

Archer GRC

Description du poste

Yakshna Solutions, Inc. is seeking an IT Security Analyst 2 to support the Department of Corrections in Richmond, VA.

This remote-friendly role requires strong governance, risk management, and compliance experience to assess threats, document controls, and ensure regulatory alignment. You will coordinate risk assessments, track remediation, review vendor security documentation, and help develop security policies and awareness programs across IT teams and stakeholders.