Remote IT Security Governance Analyst II

BranCore Technologies, LLC; Richmond (VA); Remote; USD 110,000 - 150,000; Full time

Job summary

BranCore Technologies, LLC is seeking a skilled security governance professional to oversee risk assessments, privacy reviews, and compliance initiatives for Virginia-based engagements. The role supports architecture reviews, data-sharing governance, and audit responses in a remote-capable, contract environment.

The candidate will apply NIST and CJIS-aligned controls, maintain risk artifacts, and collaborate with system owners to ensure continuous risk reduction across multiple initiatives.

Qualifications

• Experience in cybersecurity, information security, IT security governance, or risk management.
• Experience applying NIST security frameworks, including NIST SP 800-53.
• Experience maintaining risk registers, documenting findings, and tracking corrective actions.
• Familiarity with third-party risk, vendor security, and audit processes.

Responsibilities

• Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, services, integrations, and technology initiatives.
• Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and other approved agency tools.
• Support interconnection and data-sharing governance by reviewing MOUs and related agreements for security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements.
• Coordinate audit, assessment, and oversight activities; collect and validate evidence; respond to inquiries; document findings; and manage corrective actions through closure with internal audit, VITA, and other authorized reviewers.

Skills

Cybersecurity governance

Risk assessment

GRC

NIST SP 800-53

HIPAA/PCI/FERPA knowledge

Tools

Archer GRC

Job description

BranCore Technologies, LLC is seeking a skilled security governance professional to oversee risk assessments, privacy reviews, and compliance initiatives for Virginia-based engagements. The role supports architecture reviews, data-sharing governance, and audit responses in a remote-capable, contract environment.

The candidate will apply NIST and CJIS-aligned controls, maintain risk artifacts, and collaborate with system owners to ensure continuous risk reduction across multiple initiatives.