Job Description
Job DescriptionExperience and Skills
Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.
VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements.
Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.
Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.
Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.
Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.
AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.
Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.
experience in cybersecurity, information security, IT security governance, or risk management.
Required
5
Years
experience performing security risk assessments, compliance reviews, or GRC activities.
Required
3
Years
experience applying NIST security frameworks, including NIST SP 800-53.
Required
4
Years
experience conducting security control assessments and supporting IT audits.
Required
3
Years
experience maintaining risk registers, documenting findings, and tracking corrective actions.
Required
3
Years
6. Experience developing security documentation, policies, procedures, assessment reports, and executive summaries.
Required
5
Years
Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership.
Required
3
Years
Ability to manage multiple security assessments, compliance activities, and competing deadlines.
Required
3
Years