Senior InfoSec Compliance & Awareness Lead

Commonwealth of VA Careers; Richmond (VA); Hybride; USD 73 000 - 90 000; Plein temps

Résumé du poste

Commonwealth of VA Careers in Richmond, VA seeks a Senior Information Security Compliance Analyst to guide security awareness, enforce regulatory-compliant controls, and support IT projects on a hybrid schedule (3 days in office, 2 telework days per week). The role reports to the Information Security and Privacy Officer and involves leading security policy updates and training initiatives.

The position emphasizes risk assessment, incident response readiness, and mentorship for junior staff, with

Responsabilités

• Lead review, development, and updating of information security policies, standards, and procedures to align with regulatory requirements and best practices.
• Create and deliver information security trainings using KnowBe4 platform.
• Develop SCC-wide security awareness programs for employees including phishing prevention and response.
• Implement security controls ensuring adherence to established standards across the organization.
• Conduct risk assessments to identify and evaluate security risks across systems, apps, and processes.
• Identify and recommend mitigation strategies for risk assessments.
• Participate in IT projects, providing information security support and guidance on security requirements.
• Provide advanced technical support for compliance tools and technologies to ensure effective operation.
• Ensure security practices and tools comply with regulations, standards, and frameworks.
• Research emerging threats, technologies and regulatory changes to identify improvement opportunities.
• Provide guidance and mentorship to junior analysts, and assist on-call security needs.

Description du poste

Commonwealth of VA Careers in Richmond, VA seeks a Senior Information Security Compliance Analyst to guide security awareness, enforce regulatory-compliant controls, and support IT projects on a hybrid schedule (3 days in office, 2 telework days per week). The role reports to the Information Security and Privacy Officer and involves leading security policy updates and training initiatives.

The position emphasizes risk assessment, incident response readiness, and mentorship for junior staff, with