GRC NIST IT Audit Leadership Skills Communication Analyst (Jobs in Richmond, VA   Requirement id 159378 Job title Analyst Job location in Richmond, VA Skills required Information Security, IT Security, Risk Management, GRC NIST IT Audit Leadership Skills Comm Open Date 21-Oct-2026 Close Date Job type Contract Duration 12 Months Compensation DOE Status requirement --- Job interview type --- Apply    Email Recruiter: coolsoft Job Description Analyst: Information Security, IT Security, Risk Management, GRC NIST IT Audit Leadership Skills Comm Start date: 11/2/2026 End Date : 10/25/2027 Submission deadline: 10/27/2026 Client Info: DOC Note: *Remote *In Person Only *candidates reside in Virginia or within a reasonable distance in the event they need to report on site. Description: The statements below describe the principal duties of the position and are not intended to be all-inclusive. • Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, services, integrations, and technology initiatives. • Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and other approved agency tools. Track remediation commitments, due dates, residual risk, and required executive decisions. • Apply and interpret Commonwealth and agency requirements, including VITA SEC530, NIST guidance, CIS Controls, DoD STIGs, CJIS and VCIN requirements, and applicable HIPAA, PCI, FERPA, FTI, privacy, and contractual obligations. • Partner with system owners and data owners to establish ownership, classify information, document security plans and controls, complete periodic reviews, and maintain evidence needed for authorization, audit, and ongoing compliance. • Review vendor and third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, MOUs, MOAs, NDAs, and other interconnection documentation. Identify conditions, gaps, compensating controls, and escalation needs. • Support interconnection and data-sharing governance by reviewing MOUs and related agreements for security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements. • Coordinate audit, assessment, and oversight activities; collect and validate evidence; respond to inquiries; document findings; and manage corrective actions through closure with internal audit, VITA, and other authorized reviewers. • Develop, maintain, and communicate security policies, standards, procedures, guidelines, templates, and governance processes. Recommend practical improvements that strengthen compliance and reduce risk. • Support the agency security awareness and training program, including targeted compliance training, acknowledgements, tracking, reporting, and education for system owners, technical staff, and other stakeholders. • Perform governance reviews for emerging technology and artificial intelligence initiatives. Evaluate business purpose, data sensitivity, privacy, security, human oversight, vendor assurances, risks, and required approvals; document outcomes and handoffs. • Assist with security planning for continuity, incident response, disaster recovery, business continuity, audit logging, configuration and hardening, access reviews, vendor management, and other control areas. • Prepare accurate executive, management, and Commonwealth reporting on governance workload, system inventory, risks, findings, remediation progress, compliance status, metrics, and program priorities. • Provide clear security guidance to project teams, operational IT, procurement, business units, and vendors. Facilitate meetings, communicate requirements professionally, and escalate unresolved risk or noncompliance through established channels. • Participate in incident and post-incident governance activities as assigned, including documentation review, control-gap identification, privacy or regulatory coordination, and corrective-action tracking. • Perform other related duties and special projects in support of the IT Security Governance program. <   Call 502-379-4456 Ext 100 for more details. Please provide Requirement id: 159378 while calling.   Other jobs in VA: Alexandria (1), Ashburn (3), Cardinal (1), Charllottesville (1), Charlottesville (6), Chesapeake (2), Chester (2), Dulles (3), Fredericksburg (1), Fremont (1), Glen Allen (2), Reston (4), Richmond (45), Roanoke (14), Virginia Beach (14), Information Security job openings in Richmond, VA Jobs List SCC - Vulnerability Management Analyst (813431) Create date: 06-Oct-2026 Start date: 10/26/2026 End Date : 10/29/2027 Submission deadline: 10/13/2026 Client Info: SCC Note: ON SITE: 2-3 days/week. Parking is NOT provided for contractors. *Deadline to submit: Tuesday Oct 13 by 4 pm EST (*1 day later due to the holiday on 10/12) * Work Arrange.... (This job is for - Management Jobs in VA Richmond Analyst - (in Richmond, VA)) SCC - IT Security Auditor 3 (768270) Create date: 22-Jul-2025 Start date : 08/12/2025 End Date : 07/11/2026 Submission deadline : 07/28/2025 Client Info : SCC Note: * Agency Interview Type : Both Web Cam and In Person Interview * Hybrid * Pls note: The manager will conduct first round interviews on TEAMS and then require the TOP ca.... (This job is for - job Jobs in VA Richmond Consultant - (in Richmond, VA)) Security Technology Subject Matter Expert (SME) (748002) Create date: 11-Oct-2024 No of Submissions : 2 Start date : 10/28/2024 End Date : 04/30/2025 Submission deadline : 10/16/2024 Client Info : VITA Note: * Agency Interview Type : Web Cam Interview Only * Hybrid Description : *Candidates will be required to attend monthl.... (This job is for - SIEM Jobs in VA Richmond Consultant - (in Richmond, VA)) VDOT IT Security Analyst 3 (733528) Create date: 23-Jul-2024 * Hybrid No of Submissions : 2 Start date : 06/07/2024 End Date : 06/30/2024 Submission deadline : 7/26/2024 Client Info : VDOT Note: * Agency Interview Type : In Person Only * On-Site Interviews. * Candidate will need to work On-Site multiple days .... (This job is for - job Jobs in VA Richmond Analyst - (in Richmond, VA)) VSP - IT Security Analyst 4 (733597) Create date: 11-Apr-2024 Hybrid Start date :05/06/2024 End Date : 06/30/2024 Submission deadline : 4/16/2024 Client Info : VSP Description : ------------------------------------------------------ DO NOT SUBMIT ANYONE THAT WAS SUBMITTED TO 732050. NEW CANDIDATES ONLY!!! Position will be extend.... (This job is for - job Jobs in VA Richmond Analyst - (in Richmond, VA))    Information Security job openings in other states Jobs List MCD - IT Security Analyst 3/ ITSA 3 (808388) Create date: 19-Oct-2026 Start date : 08/31/2026 End Date : 06/30/2027 Submission deadline : 10/21/2026 Client Info : MCD Note: * ONSITE Description: The Ohio Department of Medicaid (ODM) is seeking an IT Security Analyst 3 to support the agencys enterprise cybersecurity, governance, risk manage.... (This job is for - Cybersecurity Jobs in OH COLUMBUS Analyst - (in Columbus, OH)) Security Architect - Consultant - 11518 Create date: 24-Jun-2026 Start date :7/13/2026 End Date :12 Months from projected start date Submission deadline :July 1st, 2026, 5:00 PM EST. Client Info : ADMIN Note: * Candidate location: No South Carolina residency required. Open to nationwide candidates. All travel-related costs for onsite work will be the responsibil.... (This job is for - job Jobs in SC Columbia Consultant - (in Columbia, SC)) Network Engineer - Consultant - 9343 Create date: 06-Jan-2026 Start date :2/10/2026 End Date : 12 Months from projected start date Submission deadline :01/14/2025 at 5:00 PM EST. Client Info : SCDHHS Note: * Candidate location: Candidate must be a CURRENT SC resident. No relocation allowed. * Interview Process: 1 round - virtual * W.... (This job is for - AWS Jobs in SC Columbia Consultant - (in Columbia, SC)) SENIOR CLOUD SECURITY ENGINEER - 8502 Create date: 27-Oct-2025 Start date : 11/25/2025 End Date : 12 Months from projected start date Submission deadline : 11/3/2025 5:00:00 PM Client Info : SCDHHS Note: * Interview Process: 1 round - virtual * Duration of the Contract: 12 months * Possibility for Extension: Yes * W.... (This job is for - AWS Jobs in SC Columbia Engineer - (in Columbia, SC)) GA DHS - Information Security Analyst (776405) Create date: 11-Sep-2025 Start date : 10/13/2025 End Date : 06/30/2026 Submission deadline : 09/17/2025 Client Info : DHS Note: * Agency Interview Type : Web Cam Interview Only * Hybrid Description : This role is responsible for monitoring, detecting, analyzing, and responding to secur.... (This job is for - Cybersecurity Jobs in GA Atlanta Analyst - (in Atlanta, GA))    Information Security job openings in VA Jobs List DSS IT Security Analyst 2 (743601) Create date: 27-Aug-2024 No of Submissions : 2 Start date : 09/03/2024 End Date : 09/02/2025 Submission deadline : 8/30/2024 Client Info : DSS Note: * Agency Interview Type : Either Phone or In Person * Hybrid * Please do not submit candidates previously submitted to 743571. Healthcare Jobs in VA GlenAllen Analyst - (in Glen Allen, VA)) Cyber Security Consultant Create date: 09-Nov-2016 Start Date : 11/21/2016 Submission Dead Line : 11/15/2016 Description : Visa Status: US Citizen / GC / EAD Key Job Responsibilities: - Establish and maintain a Governance, Risk and Compliance program, - Own and facilitate required GRC related self-assessments and associated CybersecurityCISSP Jobs in VA Herndon Consultant - (in Herndon, VA)) Vormetric Database Security Engineer - J-11-001-229 Create date: 23-Apr-2015 The Security Engineer position will be part of the Network and Security Engineering Team within the Information Technology Division. This position will provide security engineering support to safeguard the infrastructure, applications and data across multi-site enterprise and data center environments; including the evaluation, design, implementatio.... (This job is for - job Jobs in VA RESTON Engineer - (in Reston, VA)) IAM SME - J-11-000-181 Create date: 20-Apr-2015 The IAM Security Engineer will be part of the Network and Information Security Engineering Team within the Information Technology Division. This position is responsible to provide the design, development, system integration, deployment and problem resolution for complex Identity and Access Management systems. Responsibilities Include: LDAP Jobs in VA RESTON Specialist - (in Reston, VA)) Infrastructure/Server Provisioner - J-10-691-903 Create date: 06-Aug-2012 [**Note : Start Date : 08-20-2012 End Date : 12-31-2012**] Description: Title:Infrastructure Provisioner Duration:5 months+ Location: Mclean, Va TS Core requires additional support for infrastructure provisioning activities. TS Core Statement: The candidate will be a member .... (This job is for - Unix LinuxActive Directory Management Jobs in VA HERNDON Manager - (in Herndon, VA)) (Analyst: Information Security, IT Security, Risk Management, GRC NIST IT Audit Leadership Skills Comm in Richmond, VA)

Featured Jobs Mapping Communication Analyst (Jobs in Richmond, Virginia) Peripherals Communication Expert (Jobs in Rocky Mount, North Carolina) GRC Analyst (Jobs in Richmond, Virginia) Consultant (Jobs in Nashville, Tennessee) Agile Testing IT Analyst (Jobs in Lansing, Michigan) Business Manager (Jobs in COLOMBUS, Ohio) Database Data Developer (Jobs in Lansing, Michigan) HCM - Specialist (Jobs in Jackson, Mississippi) Intune Azure Security Specialist (Jobs in Jackson, Mississippi) GitHub Linux Engineer (Jobs in Pontiac, Michigan)