FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
IT Security Analyst
TOMORROW HIRE. Support the development, implementation, and improvement of DOC cybersecurity governance and compliance activities .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in cybersecurity governance, risk management, and compliance, with a strong focus on applying NIST frameworks and conducting security assessments. Proficient in developing security documentation and policies while effectively communicating with technical teams and leadership.
Highest-signal resume keywords
Cybersecurity GovernanceNIST SP 800-53 ApplicationSecurity Risk AssessmentsGRC ActivitiesSecurity Documentation Development
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Risk AssessmentsCompliance ReviewsControl AssessmentsRisk Register MaintenanceSecurity Documentation DevelopmentData Classification ReviewsBusiness Impact AnalysesIncident Response SupportVendor Security Documentation ReviewSecurity Metrics Preparation
Soft Skills
Strong Written CommunicationStrong Verbal CommunicationAnalytical SkillsDiscretion and Professional JudgmentAbility to Manage Competing Deadlines
Tools & Technologies
Archer GRCGRC PlatformsSecurity Awareness Training ToolsCompliance Tracking ToolsAudit Logging Systems
Industry Keywords
NIST GuidanceVITA SEC530CIS ControlsDoD STIGsCJISVCINHIPAAPCI DSSFERPAFTI
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Support the development, implementation, and improvement of DOC cybersecurity governance and compliance activities
- Evaluate security risks across systems, applications, services, vendors, and technology initiatives
- Conduct security risk assessments, Business Impact Analyses, data classification reviews, privacy reviews, control assessments, and security feasibility reviews
- Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and remediation tracking in Archer GRC or approved tools
- Apply NIST guidance, VITA SEC530, CIS Controls, DoD STIGs, CJIS, VCIN, HIPAA, PCI, FERPA, and FTI requirements
- Document security plans, assign ownership, classify information, review controls, and maintain audit and authorization evidence
- Review third-party security documentation, SOC reports, security questionnaires, architecture and data-flow information, contracts, and interconnection agreements
- Evaluate data-sharing agreements, MOUs, and related security, privacy, access-control, least-privilege, data-handling, and incident-notification requirements
- Coordinate audits and assessments, validate evidence, document findings, respond to inquiries, and track corrective actions through closure
- Develop and maintain security policies, standards, procedures, guidelines, templates, and governance processes
- Support security awareness and compliance training, including acknowledgements, tracking, reporting, and stakeholder education
- Review emerging technology and artificial intelligence initiatives for security, privacy, compliance, data sensitivity, vendor assurances, and required approvals
- Support governance activities related to incident response, disaster recovery, business continuity, audit logging, system hardening, access reviews, and vendor management
- Prepare executive and management reports covering security risks, findings, remediation progress, compliance status, metrics, and program priorities
- Provide security guidance to project teams, IT operations, procurement, business units, and vendors; facilitate meetings and escalate unresolved risks
- Support post-incident governance reviews, control-gap identification, regulatory coordination, and corrective-action tracking
- Perform other related duties and special projects as assigned
Requirements
What you’ll need- At least 5 years of experience in cybersecurity, information security, IT security governance, or risk management
- At least 4 years of experience applying NIST security frameworks, including NIST SP 800-53
- At least 3 years of experience performing security risk assessments, compliance reviews, or GRC activities
- At least 3 years of experience conducting security control assessments and supporting IT audits
- At least 3 years of experience maintaining risk registers, documenting findings, and tracking corrective actions
- At least 3 years of experience developing security documentation, policies, procedures, assessment reports, and executive summaries
- Strong written and verbal communication skills when working with technical teams, business owners, auditors, and leadership
- Ability to manage multiple security assessments, compliance activities, and competing deadlines
- Ability to analyze technical and business information, identify control gaps, evaluate residual risk, and recommend practical corrective actions
- Ability to handle sensitive information with discretion and professional judgment
- Preferred: 3+ years using Archer GRC or a comparable GRC platform
- Preferred: 2+ years applying Commonwealth of Virginia information security requirements, including VITA SEC530
- Preferred: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires
- Preferred: 3+ years conducting Business Impact Analyses, data classification reviews, and security feasibility assessments
- Preferred: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements
- Preferred: 2+ years reviewing data-sharing agreements, MOUs, and security and privacy obligations
- Preferred: 2+ years supporting incident response, disaster recovery, or business continuity compliance
- Preferred: 1+ year assessing security, privacy, and compliance risks associated with AI or emerging technologies
- Preferred: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings
- Candidates must provide their current city and state of residence
- Candidates must confirm their ability to attend an in-person interview
- Candidates must attest that they will physically reside within the United States throughout the assignment
Benefits
Comp & perks- Pay rate: $66.68 per hour
- Remote position
- Occasional onsite attendance in Virginia for meetings as needed