Remote IT Security Governance & Risk Analyst

Tomorrow Hire Llc.; Richmond (VA); À distance; USD 76 000 - 108 000; Plein temps

Résumé du poste

The Virginia Department of Corrections (DOC) is seeking an IT Security Analyst 2 to support its enterprise cybersecurity program. This remote role focuses on security governance, risk management, compliance, privacy, third-party risk, and audit readiness.

The analyst conducts security assessments, maintains risk documentation, and works with vendors, auditors, and business owners to identify risks and improve security practices. This is a contract position with pay at $66.68 per hour.

Qualifications

• At least 5 years in cybersecurity or risk management.
• At least 4 years applying NIST frameworks (NIST SP 800-53).
• At least 3 years performing risk assessments or GRC activities.
• At least 3 years documenting findings and tracking corrective actions.
• Strong written and verbal communication with technical teams, business owners, auditors, and leadership.

Responsabilités

• Conduct risk assessments, BIAs, data classification reviews, privacy reviews, control assessments, and security feasibility reviews.
• Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and remediation tracking in Archer GRC or other approved tools.
• Apply security frameworks and requirements (NIST, SEC530, CIS Controls, DoD STIGs, CJIS, HIPAA, PCI, FERPA, FTI).
• Coordinate audits and assessments, validate evidence, document findings, respond to inquiries, and track corrective actions to closure.
• Develop and maintain security policies, standards, procedures, guidelines, templates, and governance processes.
• Prepare executive reports covering risks, findings, remediation progress, and program priorities.

Connaissances

Security governance

Risk management

Compliance

NIST SP 800-53

Audit readiness

Communication

Outils

Archer GRC

Description du poste

The Virginia Department of Corrections (DOC) is seeking an IT Security Analyst 2 to support its enterprise cybersecurity program. This remote role focuses on security governance, risk management, compliance, privacy, third-party risk, and audit readiness.

The analyst conducts security assessments, maintains risk documentation, and works with vendors, auditors, and business owners to identify risks and improve security practices. This is a contract position with pay at $66.68 per hour.