Skip to main content
Loading
loadingbar
Loading, Please wait..!!

It Security Grc Analyst

  • It Security Grc Analyst job type Posted on: Oct 30, 2026
  • It Security Grc Analyst experience level Stellar Professionals
  • It Security Grc Analyst employment type Richmond, Virginia
  • It Security Grc Analyst employment type Onsite
  • It Security Grc Analyst salary CTC

Point Apply Here APPLY LATER

Curious about compensation?

Explore the historical salary trends, average pay, and estimated compensation for It Security Grc Analyst roles in Virginia.

View Salary Guide →

Job Title :

It Security Grc Analyst

Job Type :

Contract

Job Location :

Richmond Virginia United States

Remote :

No

Jobcon Logo Job Description :

Position: IT Security Governance Analyst
Location: Richmond, VA (6900 Atmore Drive)
Work Arrangement: Remote (Candidates must reside in Virginia or within a reasonable commuting distance for occasional on-site meetings)
Interview Process: In-Person Only
Position Overview
We are looking for an experienced IT Security Governance Analyst to support and strengthen enterprise cybersecurity operations. In this role, you will lead governance, risk, compliance (GRC), privacy, and security assurance initiatives across enterprise systems, services, and emerging technologies.
Key Responsibilities
  • Risk & Compliance Assessments: Perform security risk assessments, Business Impact Analyses (BIAs), data classifications, third-party vendor reviews (SOC reports, MOUs), and compliance audits.
  • Framework Management: Apply and interpret key security standards and policies (VITA SEC530, NIST, CIS Controls, CJIS, VCIN, HIPAA, PCI, FERPA, FTI).
  • GRC Maintenance: Track remediation commitments, maintain risk registers, and manage audit evidence using Archer GRC and other enterprise tools.
  • Policy & AI Governance: Develop security policies, templates, and training. Perform governance reviews for emerging technology and AI initiatives.
  • Stakeholder Collaboration: Provide security guidance to IT, business units, and vendors, preparing executive briefings and metrics on risk status.
Key Skills Required
  • Core Cybersecurity & GRC: 5+ years in IT security governance, cybersecurity, or risk management.
  • Security Frameworks: 4+ years of hands-on experience applying NIST SP 800 standards.
  • Risk Assessments & Audits: 3+ years conducting security risk/control assessments, supporting audits, and tracking corrective actions.
  • Documentation & Reporting: 5+ years writing security policies, assessment reports, and executive summaries.
  • Communication: 3+ years managing multiple assessments and effectively communicating across technical teams, leadership, and auditors.
Desired Skills (Bonus)
  • 3+ years: Archer GRC platform experience, Third-Party Risk Management, BIAs, Regulatory Compliance (CJIS/HIPAA/PCI).
  • 2+ years: VITA SEC530 compliance, Data-Sharing Agreements (MOUs), Incident Response/Continuity Governance.
  • 1+ year: AI & Emerging Technology Governance.
Candidate Requirements
  • Must physically reside within the United States.
  • Willingness to report on-site in Richmond, VA as needed.
  • Ability to attend an in-person interview.

Jobcon Logo Position Details

Posted:

Oct 30, 2026

Reference Number:

12347-13875

Employment:

CTC

City:

Richmond

Job Origin:

CIEPAL_ORGANIC_FEED

Share this job:

  • linkedin

Jobcon Logo
A job sourcing event
In Dallas Fort Worth
Aug 19, 2017 9am-6pm
All job seekers welcome!

It Security Grc Analyst    Apply

Click on the below icons to share this job to Linkedin, Twitter!

Position: IT Security Governance Analyst
Location: Richmond, VA (6900 Atmore Drive)
Work Arrangement: Remote (Candidates must reside in Virginia or within a reasonable commuting distance for occasional on-site meetings)
Interview Process: In-Person Only
Position Overview
We are looking for an experienced IT Security Governance Analyst to support and strengthen enterprise cybersecurity operations. In this role, you will lead governance, risk, compliance (GRC), privacy, and security assurance initiatives across enterprise systems, services, and emerging technologies.
Key Responsibilities
  • Risk & Compliance Assessments: Perform security risk assessments, Business Impact Analyses (BIAs), data classifications, third-party vendor reviews (SOC reports, MOUs), and compliance audits.
  • Framework Management: Apply and interpret key security standards and policies (VITA SEC530, NIST, CIS Controls, CJIS, VCIN, HIPAA, PCI, FERPA, FTI).
  • GRC Maintenance: Track remediation commitments, maintain risk registers, and manage audit evidence using Archer GRC and other enterprise tools.
  • Policy & AI Governance: Develop security policies, templates, and training. Perform governance reviews for emerging technology and AI initiatives.
  • Stakeholder Collaboration: Provide security guidance to IT, business units, and vendors, preparing executive briefings and metrics on risk status.
Key Skills Required
  • Core Cybersecurity & GRC: 5+ years in IT security governance, cybersecurity, or risk management.
  • Security Frameworks: 4+ years of hands-on experience applying NIST SP 800 standards.
  • Risk Assessments & Audits: 3+ years conducting security risk/control assessments, supporting audits, and tracking corrective actions.
  • Documentation & Reporting: 5+ years writing security policies, assessment reports, and executive summaries.
  • Communication: 3+ years managing multiple assessments and effectively communicating across technical teams, leadership, and auditors.
Desired Skills (Bonus)
  • 3+ years: Archer GRC platform experience, Third-Party Risk Management, BIAs, Regulatory Compliance (CJIS/HIPAA/PCI).
  • 2+ years: VITA SEC530 compliance, Data-Sharing Agreements (MOUs), Incident Response/Continuity Governance.
  • 1+ year: AI & Emerging Technology Governance.
Candidate Requirements
  • Must physically reside within the United States.
  • Willingness to report on-site in Richmond, VA as needed.
  • Ability to attend an in-person interview.

Loading
Please wait..!!