Remote IT Security & Compliance Analyst

Ampcus, Inc; Richmond (VA); Remote; USD 90,000 - 120,000; Full time

Job summary

Ampcus, Inc. is seeking an IT Security Analyst 2 to support enterprise cybersecurity by governing risk, compliance, privacy, and security assurance activities.

The role focuses on coordinating risk assessments, data classification, and control implementation across systems and vendors. Responsibilities include managing risk registers, remediation tracking, audits, and governance documentation, with engagement from executives and system owners.

Qualifications

• Experience with governance, risk, and compliance frameworks.
• Familiarity with NIST SP 800-53, CJIS/VCIN, HIPAA, PCI, FERPA or FTI.
• Ability to document security plans, risk assessments, and audit evidence.
• Strong communication with executives, auditors, and technical teams.

Responsibilities

• Conduct governance reviews for risk, privacy, and compliance across IT systems.
• Maintain risk registers, assessments, evidence repositories, and remediation plans.
• Review third-party security documentation, SOC reports, and questionnaires; identify gaps and remediation actions.
• Develop and maintain security policies, standards, and governance templates; communicate requirements.

Skills

Cybersecurity governance

Risk management

Compliance

Privacy

Third-party risk

Audit practices

Tools

Archer GRC

Job description

Ampcus, Inc. is seeking an IT Security Analyst 2 to support enterprise cybersecurity by governing risk, compliance, privacy, and security assurance activities.

The role focuses on coordinating risk assessments, data classification, and control implementation across systems and vendors. Responsibilities include managing risk registers, remediation tracking, audits, and governance documentation, with engagement from executives and system owners.