Strategic IT Security Governance Analyst

Summit Human Capital; Richmond (VA); Hybrid; USD 41,000 - 55,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Comprehensive benefits package

Job summary

Summit Human Capital seeks an IT Security Governance Analyst to support a Virginia public sector client, focusing on protecting sensitive information through governance, risk, compliance, privacy and security assurance across diverse systems.

The candidate will leverage information security and risk-management experience to prepare analyses, reports, and stakeholder communications, while coordinating with owners to maintain controls and documentation under deadlines.

Qualifications

• Experience in information security, cybersecurity governance, IT risk management, compliance, audit, privacy, or related IT discipline.
• Ability to prepare clear written analyses, reports, and stakeholder communications.
• Experience applying security policies, standards, and regulatory/contractual requirements.

Responsibilities

• Conduct and coordinate security risk assessments, privacy reviews, and control assessments for systems and technology initiatives.
• Maintain risk registers, assessment records, corrective-action plans, and evidence repositories.
• Apply Commonwealth and agency requirements including NIST, CIS Controls, HIPAA, PCI, CJIS, FERPA, and contracts.
• Partner with system and data owners to classify information and maintain security plans and controls.
• Review vendor security documentation, identify gaps, and support interconnection and data-sharing governance.
• Develop and communicate security policies, standards, and governance processes.

Skills

Information security

Cybersecurity governance

IT risk management

Compliance

Audit

Privacy

Stakeholder communications

Confidentiality

Education

Security+ (CompTIA)

CISM

CRISC

CISSP

CISA

HCISPP

Tools

Archer GRC

Job description

Summit Human Capital seeks an IT Security Governance Analyst to support a Virginia public sector client, focusing on protecting sensitive information through governance, risk, compliance, privacy and security assurance across diverse systems.

The candidate will leverage information security and risk-management experience to prepare analyses, reports, and stakeholder communications, while coordinating with owners to maintain controls and documentation under deadlines.