IT Security Analyst 2
NOVALINK SOLUTIONS LLC
Posted: 10/21/2026Cyber Security
IT Security Analyst
Kairos Power
Posted: 10/21/2026CloudCyber SecurityFirewalls
Cyber Security Analyst
Sprezzatura
Posted: 10/21/2026Cyber SecurityServiceNow
Security Analyst
BCC Software
Posted: 10/21/2026AzureCloudCyber SecurityFirewallsLinuxMacOS
Security Analyst
BCC Software
Posted: 10/21/2026AzureCloudCyber SecurityFirewallsLinuxMacOS
Security Analyst
The Health Management Academy
Posted: 10/20/2026AzureCloudPython
Lead Security Analyst – Digital Forensics and Incident Response
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityKubernetesLinuxMacOSPythonSplunk
Senior Security Analyst
Sola
Posted: 10/20/2026AWSFirewallsJavaScriptLinuxNode.jsPython
Senior Security Analyst
Ensono
Posted: 10/20/2026AzureCloudCyber SecurityDNSFirewallsPythonSQLTCP/IP
Cloud Security Analyst
InvestCloud, Inc.
Posted: 10/20/2026AWSAzureCloudFirewallsKubernetesTerraform
IT Security Analyst
DecisionPoint Corporation
Posted: 10/20/2026Cyber Security
Senior Cybersecurity Analyst
Law School Admission Council (LSAC)
Posted: 10/20/2026AzureCloudCyber SecurityFirewallsTCP/IPVault
Lead Analyst – Cyber Security Operations
Hyatt
Posted: 10/20/2026CloudCyber SecurityFirewallsPythonSQLTCP/IP
Analyst, Security Technology
S&P Global
Posted: 10/20/2026
Industrial Security Analyst – Top Secret
Xcelerate Solutions
Posted: 10/20/2026
Security Analyst
AVANT Communications
Posted: 10/20/2026
Security & Network Analyst II
The Jackson Laboratory
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSFirewallsITSMPythonSQL+2 more
IT Security Analyst
Epicor
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSLinuxPythonSplunkTCP/IP
Intermediate Cybersecurity Analyst – Splunk
General Dynamics Information Technology
Posted: 10/16/2026CloudCyber SecurityFirewallsMS SQL ServerOracleSplunkSQL
Cybersecurity Analyst II
Frontgrade Technologies
Posted: 10/16/2026Cyber SecurityIoTLinuxPython
IT Security Analyst 2
NOVALINK SOLUTIONS LLCCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity governance, risk management, and compliance, with a strong focus on NIST security frameworks and the ability to develop and maintain security documentation and assessment reports. Proficient in conducting security risk assessments, managing vendor security documentation, and communicating effectively with diverse stakeholders.
Highest-signal resume keywords
Cybersecurity GovernanceNIST SP 800-53 ApplicationSecurity Risk AssessmentsArcher GRC ExperienceCompliance Reviews
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews
- Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and approved agency tools
- Track remediation commitments, due dates, residual risk, and required executive decisions
- Apply Commonwealth and agency security requirements, including VITA SEC530, NIST guidance, CIS Controls, DoD STIGs, CJIS, VCIN, HIPAA, PCI, FERPA, FTI, privacy, and contractual obligations
- Partner with system and data owners on ownership, information classification, security plans, controls, periodic reviews, and authorization or audit evidence
- Review vendor and third-party security documentation, including SOC reports, questionnaires, architecture, data flows, contracts, MOUs, MOAs, NDAs, and interconnection documentation
- Identify security conditions, gaps, compensating controls, and escalation needs
- Support interconnection and data-sharing governance, including review of security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements
- Coordinate audits, assessments, and oversight activities; validate evidence, respond to inquiries, document findings, and manage corrective actions through closure
- Develop and maintain security policies, standards, procedures, guidelines, templates, and governance processes
- Support security awareness and training through compliance training, acknowledgements, tracking, reporting, and stakeholder education
- Perform governance reviews for emerging technology and artificial intelligence initiatives, evaluating purpose, data sensitivity, privacy, security, human oversight, vendor assurances, risks, approvals, outcomes, and handoffs
- Assist with continuity, incident response, disaster recovery, business continuity, audit logging, configuration and hardening, access reviews, and vendor management planning
- Prepare executive, management, and Commonwealth reporting on governance workload, system inventory, risks, findings, remediation, compliance status, metrics, and priorities
- Provide security guidance to project teams, operational IT, procurement, business units, and vendors; facilitate meetings and escalate unresolved risks or noncompliance
- Participate in incident and post-incident governance activities, including documentation review, control-gap identification, privacy or regulatory coordination, and corrective-action tracking
- Perform related duties and special projects supporting the IT Security Governance program
Requirements
What you’ll need- 5 years of experience in cybersecurity, information security, IT security governance, or risk management
- 3 years of experience performing security risk assessments, compliance reviews, or GRC activities
- 4 years of experience applying NIST security frameworks, including NIST SP 800-53
- 3 years of experience conducting security control assessments and supporting IT audits
- 3 years of experience maintaining risk registers, documenting findings, and tracking corrective actions
- 5 years of experience developing security documentation, policies, procedures, assessment reports, and executive summaries
- 3 years of experience demonstrating strong written and verbal communication with technical teams, business owners, auditors, and leadership
- 3 years of experience managing multiple security assessments, compliance activities, and competing deadlines
- Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices
- Knowledge of NIST 800-53, VITA SEC530, CIS Controls, CJIS, VCIN, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements
- Ability to analyze technical and business information, identify risks, distinguish control gaps from acceptable residual risk, and recommend defensible actions
- Ability to develop and maintain assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence
- Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical business partners
- Ability to handle sensitive information with sound judgment and discretion
- Desired: 3+ years using Archer GRC or comparable GRC platforms
- Desired: 2+ years applying Commonwealth of Virginia information security requirements
- Desired: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires
- Desired: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments
- Desired: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements
- Desired: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations
- Desired: 2+ years supporting incident response, disaster recovery, or business continuity compliance
- Desired: 1+ year assessing emerging-technology security, privacy, and compliance risks
- Desired: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings
Benefits
Comp & perks- Contract employment
- Remote work is indicated in the title, but the posting also states “in person”
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Risk AssessmentsNIST SP 800-53Security Control AssessmentsRisk Register MaintenanceSecurity Documentation DevelopmentData Classification ReviewsIncident Response SupportBusiness Continuity ComplianceAudit LoggingSecurity Metrics Preparation
Soft Skills
Strong Written CommunicationEffective Verbal CommunicationJudgment and DiscretionStakeholder EducationMeeting Facilitation
Tools & Technologies
Archer GRCCommonwealth Security RequirementsSOC ReportsSecurity QuestionnairesData-Sharing Agreements
Industry Keywords
VITA SEC530CIS ControlsCJISVCINHIPAAPCI DSSFERPAFTIThird-Party RiskCompliance Practices