I

Senior IT Security Governance & Compliance Analyst

intellibee inc • United State
Visa Sponsorship
Apply Now

Lead IT security governance, risk management, and compliance for Virginia state systems and third-party integrations. Conduct risk assessments, audits, and policy development while ensuring alignment with NIST, VITA SEC530, HIPAA, and other regulatory frameworks. Partner with stakeholders to mitigate risks, track remediation, and support executive reporting on security posture and compliance initiatives.

Key Highlights
Lead security risk assessments, compliance reviews, and governance activities for state systems and third-party vendors
Develop and maintain security policies, risk registers, and executive reporting aligned with NIST, VITA SEC530, and regulatory requirements
Collaborate with system/data owners, auditors, and vendors to ensure compliance, evidence documentation, and remediation tracking
Key Responsibilities
Conduct security risk assessments, business impact analyses, and data classification reviews for systems, applications, and integrations
Maintain risk registers, assessment records, and remediation tracking in Archer GRC and other approved tools
Apply and interpret Commonwealth (VITA SEC530), NIST, CIS Controls, and regulatory requirements (HIPAA, PCI, CJIS, etc.)
Partner with system/data owners to classify information, document security plans, and ensure compliance evidence for audits
Review vendor security documentation (SOC reports, questionnaires, contracts) and identify gaps or escalation needs
Support audit, assessment, and oversight activities, including evidence collection, corrective action management, and reporting
Develop and maintain security policies, standards, and governance processes while recommending compliance improvements
Support security awareness training, executive reporting, and governance reviews for emerging technologies (e.g., AI)
Assist with continuity, incident response, disaster recovery, and vendor management planning
Technical Skills Required
NIST SP 800-53 Framework Governance, Risk, and Compliance (GRC) Platforms (e.g., Archer) Regulatory Compliance (HIPAA, PCI DSS, CJIS, VCIN, FERPA, FTI)
Benefits & Perks
Comprehensive health coverage for employees and families
401(k) retirement savings plan
Green Card assistance for eligible candidates
Nice to Have
3+ years experience with Archer GRC platform
2+ years applying VITA SEC530 requirements
3+ years in third-party risk management (vendor security reviews)
3+ years conducting business impact analyses (BIAs)
2+ years in incident response or continuity governance
1+ year assessing AI/emerging technology risks

Job Description

IT Security Analyst, Richmond, VA, USThe statements below describe the principal duties of the position and are not intended to be all-inclusive.
Want the full job description? Read the complete details on LinkedIn, the original posting.
Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.

See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources

Similar Jobs

Explore other opportunities that match your interests

Senior SAP Cybersecurity & GRC Engineering Manager (SAP S/4HANA & Fiori)

Cyber Security
•
1d ago

Log in free to see full details

•••••• •••••• ••••••
Technical Skills Required ••••••

Deloitte

United State

Senior Applied AI Security Architect (Healthcare & Life Sciences)

Cyber Security
•
2d ago

Log in free to see full details

•••••• •••••• ••••••
Technical Skills Required ••••••

anthropic

United State

Senior Applied AI Security Architect (Healthcare & Life Sciences)

Cyber Security
•
2d ago

Log in free to see full details

•••••• •••••• ••••••
Technical Skills Required ••••••

anthropic

United State

Visas, Work Permits & Legal Insights

Stay informed about visa types, work permits, and immigration updates for international professionals.

Browse all articles

Subscribe our newsletter

New Things Will Always Update Regularly