IT Security Analyst :: Richmond, VA (Remote)

• Conduct security risk assessments, data classifications, and privacy reviews for systems and applications.
• Maintain risk registers and corrective-action plans using Archer GRC and other tools.
• Apply and interpret security requirements and compliance standards.
• Collaborate with system and data owners to document security plans and maintain compliance evidence.
• Review third-party security documentation and identify potential gaps.
• Coordinate audit and oversight activities, manage corrective actions, and document findings.
• Develop and communicate security policies, standards, and procedures.
• Support security awareness and training programs.
• Evaluate security risks for emerging technologies and artificial intelligence initiatives.
• Assist with security planning for continuity, incident response, and disaster recovery.
• Prepare executive and management reports on governance workload and compliance status.
• Provide security guidance to project teams and stakeholders.
• Participate in incident and post-incident governance activities.

Security Analysis, Computer Security, Risk Analysis, Security Analysis, Risk, Corrective Action, Regulatory Compliance, Maintain Compliance, Documentation Plan, Documentation, * Knowledge of cybersecurity governance, risk management, and compliance practices.

• Familiarity with security frameworks and standards such as NIST 800-53, SEC530, and others.
• Ability to analyze technical and business information and recommend actions.
• Proficient in developing professional documentation and managing complex assignments.
• Strong communication skills with various stakeholders.
• Ability to handle sensitive information with discretion.

Experience and Skills:

• 5 years in cybersecurity, information security, IT security governance, or risk management.
• 3 years performing security risk assessments and compliance reviews.
• 4 years applying NIST security frameworks.
• 3 years conducting security control assessments and supporting IT audits.
• 3 years maintaining risk registers and tracking corrective actions.
• 3 years developing security documentation and executive summaries.
• Strong communication skills with technical teams, business owners, auditors, and leadership.
• 3 years managing multiple security assessments and compliance activities.