> Markdown version of [/jobs/ext/2279691-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/2279691-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Analyst

- **Company:** Cornerstone Barricades
- **Location:** Richmond, VA, United States
- **Contract:** Temporary contract
- **Skills:** Cyber Security, Information Systems, Information Security Management, IT Management
- **Published:** August 28, 2026
- **Apply:** https://focusedhrsolutions.betterteam.com/it-security-analyst-lu-richmond-va-4-(20)/apply/standard

## About the Role

* Knowledge of information security controls and processes for conducting Business Impact Analyses, Risk Assessments, Third-party vendor management Required 5 Years.
 * Considerable experience with SEC 530 or NIST 800-53 rev 5 and Criminal Justice Information System (CJIS) Required 5 Years.
 * Knowledge of CIS Benchmark or IT Hardening guidelines. Required 5 Years.
 * Knowledge of incident management including training and exercises. Required 5 Years.

## Description

This position is for up to 14 months, with the option of extension, and is located in Richmond, VA.

This position will support agency's mission to support the Virginia State Police Information Security program by providing cybersecurity, risk management, IT infrastructure services and IT governance by working with the agencies to promote information security awareness and compliance with commonwealth laws, policies, and procedures.

This position will support the Information Security Office. This position will provide support to agencies in getting their agency's information Security Program into compliance with COV laws, policies and standards as needed. In addition, this position will provide information and guidance to VSP in getting the audit of their sensitive systems completed.


## Related Videos

- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)