> Markdown version of [/jobs/ext/2815817-information-security-analyst-hybrid](https://www.wearedevelopers.com/jobs/ext/2815817-information-security-analyst-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst (Hybrid) - **Company:** ASCENT SERVICES GROUP LLC - **Location:** Richmond, VA, United States - **Experience:** Experienced - **Contract:** Temporary to permanent - **Skills:** Software Applications, Spreadsheets, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Information Security Management, Software Security, Information Technology - **Published:** September 10, 2026 - **Apply:** https://www.careerjet.com/jobad/usc4e2c28feb154b423d1971e7151a5db4 ## About the Role * At least 3 years of demonstrated experience in Information Security concepts related to governance, risk, and compliance. * Extensive knowledge of information security principles and practices. * Deep understanding of methods applied to information technology infrastructure planning, implementation, and management. * Strong organizational skills with the ability to set priorities, meet established deadlines, and follow up on assignments with minimal supervision. * Familiarity or experience with security frameworks such as NIST, ISO 27001, or COBIT. * Excellent attention to detail and organizational skills. * Ability to adapt to changing situations and prioritize tasks as needed. * Experience drafting Information Security and Privacy policies, standards, and procedures. * Ability to interpret security documentation, including flow diagrams and process maps. * Knowledge of contract terms and conditions. * Proficiency in creating diagrams, flowcharts, and spreadsheets using desktop software. * Strong written communication skills with the ability to convey complex security concepts to various audiences., * Bachelor's degree in Computer Science, Information Systems, or equivalent. * Relevant security certifications such as CISA, CISSP, or an equivalent certification. * Previous experience in the financial services industry is preferred. * Knowledge of controls related to cloud security and application security. * Knowledge of Information Security regulatory compliance (e.g., GLBA, GDPR, PCI, etc.). * Familiarity with various privacy regulations (e.g., GDPR, CCPA, VCDPA). ## Description This important role will support information security across all Virginia Housing programs, projects, IT systems, and applications. The position is assigned to projects and initiatives with security and privacy components. The Information Security Analyst will assist in conducting cybersecurity and privacy awareness throughout Virginia Housing and help create and maintain the organization's Information Security and privacy policies. Additionally, the Information Security Analyst will collaborate with the Information Security Office (ISO) on various security-related projects., * Participate in Information Security and Privacy efforts across all business areas and vendor engagements to ensure that appropriate security controls are in place and adhered to by all parties. * Work within a Governance, Risk, and Compliance (GRC) system to add and update information security records and documentation. * Partner with business stakeholders to develop and maintain Information System Security Plans (SSP). * Represent the Information Security Office in PMO-led projects to ensure significant projects have appropriate ISO representation. * Collaborate across teams to understand business challenges, develop tailored solutions that provide value, facilitate compliance, and ensure clear communication. * Assist in the development and maintenance of information security standards and processes, including conducting research as needed. * Assist with controls documentation, including information system diagramming, populating risk assessment templates, and drafting control narrative documentation for business approval. * Review contracts, agreements, and vendor documentation to ensure adequate information security protections are in place. ## Related Videos - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)