Senior IT Security & GRC Analyst (Remote VA)

vTech Solution; Washington (District of Columbia); Remoto; USD 110.000 - 150.000; Tempo pieno

Descrizione del lavoro

vTech Solution is seeking an IT Security Analyst 2 to support governance, risk, compliance, privacy, and security assurance activities for a Virginia Department of Corrections program.

The role is primarily remote with occasional on-site meetings in Virginia and requires in-person interviews. Responsibilities include risk assessments, evidence management, and audits to strengthen the agency's security posture.

Competenze

• 5+ years in cybersecurity, information security, governance, risk, or compliance.
• 3+ years performing security risk assessments, compliance reviews, or GRC activities.
• 4+ years applying NIST security frameworks, including NIST SP 800-53.
• 3+ years conducting security control assessments and supporting IT audits.
• 3+ years maintaining risk registers, findings, and corrective actions.
• 5+ years developing security documentation and executive summaries.
• Strong communication with technical teams, owners, auditors and leadership.
• Knowledge of Virginia security requirements (VITA SEC530) and related standards.
• Ability to handle sensitive information with discretion.

Mansioni

• Conduct risk assessments, privacy reviews, and control assessments for systems.
• Maintain risk registers, assessment records, and corrective action plans.
• Review vendor security documentation and interconnection agreements.
• Coordinate audits and oversight activities; collect evidence and drive actions to closure.
• Develop and communicate security policies, standards, and governance processes.
• Support security awareness and training for stakeholders.
• Perform governance reviews for emerging technologies and AI initiatives.
• Prepare executive security metrics and compliance reports.

Conoscenze

Security governance

Risk assessment

GRC activities

NIST SP 800-53

Audit support

Policy development

Communication with leadership

Third-party risk

Data privacy

Strumenti

Archer GRC

Descrizione del lavoro

vTech Solution is seeking an IT Security Analyst 2 to support governance, risk, compliance, privacy, and security assurance activities for a Virginia Department of Corrections program.

The role is primarily remote with occasional on-site meetings in Virginia and requires in-person interviews. Responsibilities include risk assessments, evidence management, and audits to strengthen the agency's security posture.