Cybersecurity Governance Risk Management Risk Assessment GRC NIST Analyst (Jobs   Requirement id 159390 Job title Analyst Job location in Richmond, VA Skills required Cyber Security, Information Security, IT Security, Governance Risk Management Risk Assessme Open Date 22-Oct-2026 Close Date Job type Contract Duration 12 Months Compensation DOE Status requirement --- Job interview type --- Apply    Email Recruiter: coolsoft Job Description Analyst: Cyber Security, Information Security, IT Security, Governance Risk Management Risk Assessme Start date: 11/2/2026 End Date : 10/25/2027 Submission deadline: 10/28/2026 Client Info: DOC Note: * Remote * In Person Only Description: This is a remote role. However, DOC has requested that candidates reside in Virginia or within a reasonable distance. They may have them report on site for meetings as needed. * All interviews are in-person with no exceptions. The statements below describe the principal duties of the position and are not intended to be all-inclusive. • Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, services, integrations, and technology initiatives. • Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and other approved agency tools. Track remediation commitments, due dates, residual risk, and required executive decisions. • Apply and interpret Commonwealth and agency requirements, including VITA SEC530, NIST guidance, CIS Controls, DoD STIGs, CJIS and VCIN requirements, and applicable HIPAA, PCI, FERPA, FTI, privacy, and contractual obligations. • Partner with system owners and data owners to establish ownership, classify information, document security plans and controls, complete periodic reviews, and maintain evidence needed for authorization, audit, and ongoing compliance. • Review vendor and third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, MOUs, MOAs, NDAs, and other interconnection documentation. Identify conditions, gaps, compensating controls, and escalation needs. • Support interconnection and data-sharing governance by reviewing MOUs and related agreements for security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements. • Coordinate audit, assessment, and oversight activities; collect and validate evidence; respond to inquiries; document findings; and manage corrective actions through closure with internal audit, VITA, and other authorized reviewers. • Develop, maintain, and communicate security policies, standards, procedures, guidelines, templates, and governance processes. Recommend practical improvements that strengthen compliance and reduce risk. • Support the agency security awareness and training program, including targeted compliance training, acknowledgements, tracking, reporting, and education for system owners, technical staff, and other stakeholders. • Perform governance reviews for emerging technology and artificial intelligence initiatives. Evaluate business purpose, data sensitivity, privacy, security, human oversight, vendor assurances, risks, and required approvals; document outcomes and handoffs. • Assist with security planning for continuity, incident response, disaster recovery, business continuity, audit logging, configuration and hardening, access reviews, vendor management, and other control areas. • Prepare accurate executive, management, and Commonwealth reporting on governance workload, system inventory, risks, findings, remediation progress, compliance status, metrics, and program priorities. • Provide clear security guidance to project teams, operational IT, procurement, business units, and vendors. Facilitate meetings, communicate requirements professionally, and escalate unresolved risk or noncompliance through established channels. • Participate in incident and post-incident governance activities as assigned, including documentation review, control-gap identification, privacy or regulatory coordina   Call 502-379-4456 Ext 100 for more details. Please provide Requirement id: 159390 while calling.   Other jobs in VA: Alexandria (1), Ashburn (3), Cardinal (1), Charllottesville (1), Charlottesville (6), Chesapeake (2), Chester (2), Dulles (3), Fredericksburg (1), Fremont (1), Glen Allen (2), Reston (4), Richmond (45), Roanoke (14), Virginia Beach (14), Cyber Security job openings in Richmond, VA Jobs List VDOT Cybersecurity Engineer 3 (811203) Create date: 21-Sep-2026 Start date :9/28/2026 End Date :06/30/2027 Submission deadline :9/24/2026 Client Info :VDOT Note: *Onsite *In Person Only Description: The Cybersecurity Engineer develops and implements advanced cyber defense solutions for the agency, safeguards the infrastructure, .... (This job is for - Cybersecurity SIEM Splunk Jobs in VA Richmond Engineer - (in Richmond, VA)) VDOT Cybersecurity Engineer 3 (807541) Create date: 31-Jul-2026 Start date :08/31/2026 End Date :06/30/2027 Submission deadline : 8/4/2026 Client Info : VDOT Note: *Agency Interview Type: In Person Only *Work Arrangement: Onsite Description: Cybersecurity Engineer The Cybersecurity Engineer develops and implements ad.... (This job is for - Cybersecurity Splunk SIEM Jobs in VA Richmond Engineer - (in Richmond, VA)) VDOT - IT Security Analyst 2 (773651) Create date: 12-Aug-2025 Start Date :9/8/2025 End Date :09/09/2026 Submission Deadline :8/15/2025 Client Info : VDOT Note: * Work Arrangement: Hybrid * Agency Interview Type: In Person Only Description : we are seeking a highly motivated Security Analyst to support cyberse.... (This job is for - Cybersecurity Jobs in VA Richmond Analyst - (in Richmond, VA)) VDH Cybersecurity Engineer 3 (752757) Create date: 16-Dec-2024 Remote No of Submissions : 2 Start date : 12/16/2024 End Date : 06/30/2025 Submission deadline : 12/19/2024 Client Info : VDH Note: * Agency Interview Type: Web Cam Interview Only Description : Pentest PerformPentest on VDH Application in a.... (This job is for - Cybersecurity Jobs in VA Richmond Engineer - (in Richmond, VA)) VDOT IT Security Architect Lead (749945) Create date: 11-Nov-2024 No of Submissions : 2 Start date : 12/02/2024 End Date : 06/30/2025 Submission deadline : 11/14/2024 Note: * Agency Interview Type : In Person Only * Hybrid * Hybrid schedule for this role is mostly full time remote work with quarterly in-person meetings with .... (This job is for - Cybersecurity Jobs in VA Richmond Architect - (in Richmond, VA))    Cyber Security job openings in other states Jobs List MCD - IT Security Analyst 3/ ITSA 3 (808388) Create date: 19-Oct-2026 Start date : 08/31/2026 End Date : 06/30/2027 Submission deadline : 10/21/2026 Client Info : MCD Note: * ONSITE Description: The Ohio Department of Medicaid (ODM) is seeking an IT Security Analyst 3 to support the agencys enterprise cybersecurity, governance, risk manage.... (This job is for - Cybersecurity Jobs in OH COLUMBUS Analyst - (in Columbus, OH)) DPS-IT Security Analyst 1(ITSA1) (812707) Create date: 01-Oct-2026 Start date : 10/26/2026 End Date: 06/30/2027 Submission deadline : 10/6/2026 Client Info : DPS Note: * Hybrid work schedule;; onsite every 3rd day at 1970 West Broad Street, Columbus. Description: * Supply Chain Risk Consultant Role Overview: Consultant respon.... (This job is for - Cybersecurity Jobs in OH Columbus Analyst - (in Columbus, OH)) Network Security Analyst 1 - 529701769 Create date: 10-Sep-2026 Bid URL:https://dir.my.site.com/itsacvendor/s/itsac-vendor-response/a58cs00000RzyoFAAR/529701769?tabset-57d77=3 Start Date:10/5/2026 End Date:08/31/2027 Submission Deadline:09/16/2026 @ 5:00 PM (CT). Note: Online Submission Note: RTR form must be signed by the candidate * The working position i.... (This job is for - Cybersecurity Jobs in TX Austin Analyst - (in Austin, TX)) Security Analyst II - 160852 Create date: 06-Jul-2026 Start date :8/3/2026 End Date :06/30/2027 Submission deadline :7/13/26 at 4:00 PM CST. Client Info : DOC Note: * Interview Process: Teams Call with video and audio. (Panel Interview) * Hybrid Remote: Remote daily work with the ability to report to Madison Office for training or when re.... (This job is for - NIST Cybersecurity Jobs in WI Madison Analyst - (in Madison, WI)) IA-DOM-DOIT-SA2-Endpoint Detection Response (801624) Create date: 06-May-2026 Start date :6/1/2026 End Date :06/30/2026 Submission deadline :5/8/2026 Client Info : LGRF - SLFRF EDR Note: * Work Arrangement: Remote * Agency Interview Type: Either Web Cam or In Person Interview Description: Position Summary: We are Seeking an e.... (This job is for - Cybersecurity Jobs in IA DesMoines Consultant - (in Des Moines, IA))    Cyber Security job openings in VA Jobs List IT Audit Lead - 43832 Create date: 21-Feb-2019 Candidate must be your W2 Employee. We should submitt only GC, GC EAD, L2 EAD, H4 EAD and Citizen. Job Description : Position: IT Audit Lead Location: Vienna, VA Duration: 6mo contract to Perm Clearance: Ability to obtain and hold Public Trust Description: Cybersecurity NIST FISMA Jobs in VA Vienna TeamLead - (in VIENNA, VA)) Cyber Security Consultant Create date: 09-Nov-2016 Start Date : 11/21/2016 Submission Dead Line : 11/15/2016 Description : Visa Status: US Citizen / GC / EAD Key Job Responsibilities: - Establish and maintain a Governance, Risk and Compliance program, - Own and facilitate required GRC related self-assessments and associated CybersecurityCISSP Jobs in VA Herndon Consultant - (in Herndon, VA)) (Analyst: Cyber Security, Information Security, IT Security, Governance Risk Management Risk Assessme in Richmond, VA)

Featured Jobs Tableau SSRS Problem Developer (Jobs in Hartford, Connecticut) Peripherals Networking Expert (Jobs in Raleigh, North Carolina) Operation Planning Leadership Manager (Jobs in Madison, Wisconsin) Microsoft Administrator (Jobs in Nashville, Tennessee) Bitbucket GIT Ansible Engineer (Jobs in Raleigh, North Carolina) Dashboards Security Analyst (Jobs in Columbia, South Carolina) Cybersecurity Governance Analyst (Jobs in Richmond, Virginia) Metadata Data Consultant (Jobs in Raleigh, North Carolina) Java HTML JQuery. Developer (Jobs in Seneca, South Carolina) Sales Manager (Jobs in Indianapolis, Indiana)