Strategic Information Security & Compliance Analyst

Commonwealth of VA Careers; Richmond (VA); On-site; USD 85,000 - 110,000; Full time

Job summary

Commonwealth of VA Careers is seeking an Information Security Risk and Compliance Analyst to join the Virginia Treasury agency in Richmond. This mid‑level role focuses on risk management, governance, and security program execution to protect critical financial systems.

The role requires expertise in NIST standards, System Security Plans, and collaboration with development teams to implement robust application security controls.

Qualifications

• Understanding of cybersecurity principles including network security, access control, and threat awareness.
• Knowledge of NIST security frameworks and compliance standards.
• Experience developing System Security Plans in line with SEC 530 or equivalent.
• Excellent written communication and strong analytical skills.
• Ability to document findings clearly and concisely with attention to detail.
• Experience working with development teams on application security test plans.

Responsibilities

• Application Security: create and maintain System Security Plans and acceptance criteria; define testing requirements and execute security test cases; support MFA/SSO to strengthen access control.
• Security Awareness & Training: develop and manage security awareness programs; create training materials and campaigns; analyze metrics to improve program effectiveness.
• Risk Management: identify threats and vulnerabilities; create risk assessments; manage risk registers and remediation tracking.
• Governance, Compliance and Audit Support: verify alignment with NIST/SEC standards; coordinate audits; maintain security policies and dashboards.

Skills

Cybersecurity principles

NIST frameworks

RBAC & least privilege

MFA & SSO familiarity

Analytical thinking

Documentation quality

Security testing coordination

Tools

Archer

Job description

Commonwealth of VA Careers is seeking an Information Security Risk and Compliance Analyst to join the Virginia Treasury agency in Richmond. This mid‑level role focuses on risk management, governance, and security program execution to protect critical financial systems.

The role requires expertise in NIST standards, System Security Plans, and collaboration with development teams to implement robust application security controls.