> Markdown version of [/jobs/ext/3865525-doc-it-security-analyst-2](https://www.wearedevelopers.com/jobs/ext/3865525-doc-it-security-analyst-2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DOC - IT Security Analyst 2 - **Company:** V-Soft Consulting Inc. - **Location:** Richmond, VA, United States - **Experience:** Experienced - **Contract:** Contract - **Skills:** Artificial Intelligence, Cyber Security, CIS Benchmarks - **Published:** October 22, 2026 - **Apply:** https://www.dice.com/job-detail/6a3f4abf-8fe3-4f28-aaa0-fd16961bf322 ## About the Role * Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms. * VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements. * Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires. Knowledge and Skills: * Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices. * Knowledge of security frameworks and standards such as NIST 800-53, VITA SEC530, CIS Controls, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI * AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies. * Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings. ## Description * Ability to analyze technical and business information, identify risk, distinguish control gaps from acceptable residual risk, and recommend clear, defensible actions. * Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence * Ability to manage multiple complex assignments, prioritize work under deadlines, and follow through on actions involving many stakeholders.