IT Security Analyst -Archer GRC

Experience and Skills

Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms. VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements. Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.

Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments. Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements. Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.

Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance. AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies. Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.

experience in cybersecurity, information security, IT security governance, or risk management. Required 5 Years experience performing security risk assessments, compliance reviews, or GRC activities. Required 3 Years experience applying NIST security frameworks, including NIST SP 800-53.

Required 4 Years experience conducting security control assessments and supporting IT audits. Required 3 Years experience maintaining risk registers, documenting findings, and tracking corrective actions. Required 3 Years 6.

Experience developing security documentation, policies, procedures, assessment reports, and executive summaries. Required 5 Years Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership. Required 3 Years Ability to manage multiple security assessments, compliance activities, and competing deadlines.

Required 3 Years