Search Jobs | Dice.com

7 results (1 new)

Group by company

Cybersecurity Risk and Compliance Analyst

Masterapp Labs

Richmond, Virginia • Today

Easy Apply

Third Party, Contract

$40 - $50

Manager, Technology and Cybersecurity Risk / Risk Data Analyst

Genworth Financial

Richmond, Virginia • Today

Full-time

USD 109,000.00 - 169,000.00 per year

Manager, Technology and Cybersecurity Risk / Risk Data Analyst

Genworth

Richmond, Virginia • Today

Full-time

Compensation information provided in the description

Sr. Analyst, Cybersecurity, Third Party Risk Management (TPRM)

Carmax, Inc.

Richmond, Virginia • Today

Full-time

USD 102,900.00 - 154,400.00 per year

Cybersecurity A&A Risk Analyst

Cherokee Federal

Remote • Today

Full-time

USD 110,000.00 - 112,000.00 per year

Senior AI Risk Analyst

Victaulic Co

Remote • Today

Full-time

Risk Analyst (ServiceNow IRM/GRC) - Remote Role

NTT DATA Americas, Inc

Remote • 7d ago

Easy Apply

Third Party, Contract

$40 - $50

Job Details

Skills

IST 800-53
VITA SEC530
CIS Controls
CJIS and VCIN

Summary

Job Title: Cybersecurity Risk and Compliance Analyst

Location: Richmond, VA, (Remote)-They may have them report on site for meetings as needed.

Position Type: Contract

Interview Mode: In-person interview only.

Knowledge Skills and Abilities

Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
Knowledge of security frameworks and standards such as NIST 800-53, VITA SEC530, CIS Controls, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
Ability to analyze technical and business information, identify risk, distinguish control gaps from acceptable residual risk, and recommend clear, defensible actions.
Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence.
Ability to manage multiple complex assignments, prioritize work under deadlines, and follow through on actions involving many stakeholders.
Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical business partners.
Ability to handle sensitive information with sound judgment, discretion, and a service-oriented approach.

Desired Qualifications

These qualifications would strengthen a candidate's application but would not be mandatory.

Experience and Skills

Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.
VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements.
Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.
Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.
Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.
Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.
AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.
Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.

Required/Desired Skills

Skill	Required /Desired	Amount	Actual Years of Experience
experience in cybersecurity, information security, IT security governance, or risk management.	Required	5
experience performing security risk assessments, compliance reviews, or GRC activities.	Required	3
experience applying NIST security frameworks, including NIST SP 800-53.	Required	4
experience conducting security control assessments and supporting IT audits.	Required	3
experience maintaining risk registers, documenting findings, and tracking corrective actions.	Required	3
6. Experience developing security documentation, policies, procedures, assessment reports, and executive summaries.	Required	5
Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership.	Required	3
Ability to manage multiple security assessments, compliance activities, and competing deadlines.	Required	3

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91091585
Position Id: 2335-37720-1792768515
Posted 8 hours ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

IT Security Analyst 2

Richmond, Virginia

•

Yesterday

Job Description The IT Security Governance Analyst supports the enterprise cybersecurity program by administering and improving governance, risk, compliance, privacy, and security assurance activities.The statements below describe the principal duties of the position and are not intended to be all-inclusive. Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing

Easy Apply

Contract

Depends on Experience

IT Security Analyst

Remote or Richmond, Virginia

•

Today

This is a remote role. However, DOC has requested that candidates reside in Virginia or within a reasonable distance. They may have them report on site for meetings as needed. All interviews are in-person with no exceptions. The statements below describe the principal duties of the position and are not intended to be all-inclusive. Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility revi

Easy Apply

Full-time, Part-time, Contract, Third Party

IT Security Analyst 2

Richmond, Virginia

•

Today

Role:IT Security Analyst 2 Location:Richmond, VA (Remote) Duration: 12+ months Job Description: Skill Matrix: Skill Required / Desired Years experience in cybersecurity, information security, IT security governance, or risk management. 5 years required experience performing security risk assessments, compliance reviews, or GRC activities. 3 years required experience applying NIST security frameworks, including NIST SP 800-53. 4 years required experience conducting security control assessmen

Easy Apply

Contract, Third Party

Depends on Experience

IT Security Governance Analyst - Remote / Telecommute

Richmond, Virginia

•

Yesterday

We are looking for IT Security Governance Analyst - Remote / Telecommute for our client in Richmond, VAJob Title: IT Security Governance Analyst - Remote / Telecommute Job Location: Richmond, VA Job Type: Contract Pay Range: $40.00hr - $45.00hr Job Overview: The IT Security Governance Analyst supports the organization s enterprise cybersecurity program by administering and improving governance, risk, compliance, privacy, and security assurance activities. Responsibilities: All interviews are in-

Easy Apply

Contract, Third Party

Depends on Experience

Job Details

Skills

IST 800-53
VITA SEC530
CIS Controls
CJIS and VCIN

Summary

Job Title: Cybersecurity Risk and Compliance Analyst

Location: Richmond, VA, (Remote)-They may have them report on site for meetings as needed.

Position Type: Contract

Interview Mode: In-person interview only.

Knowledge Skills and Abilities

Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
Knowledge of security frameworks and standards such as NIST 800-53, VITA SEC530, CIS Controls, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
Ability to analyze technical and business information, identify risk, distinguish control gaps from acceptable residual risk, and recommend clear, defensible actions.
Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence.
Ability to manage multiple complex assignments, prioritize work under deadlines, and follow through on actions involving many stakeholders.
Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical business partners.
Ability to handle sensitive information with sound judgment, discretion, and a service-oriented approach.

Desired Qualifications

These qualifications would strengthen a candidate's application but would not be mandatory.

Experience and Skills

Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.
VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements.
Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.
Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.
Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.
Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.
AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.
Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.

Required/Desired Skills

Skill	Required /Desired	Amount	Actual Years of Experience
experience in cybersecurity, information security, IT security governance, or risk management.	Required	5
experience performing security risk assessments, compliance reviews, or GRC activities.	Required	3
experience applying NIST security frameworks, including NIST SP 800-53.	Required	4
experience conducting security control assessments and supporting IT audits.	Required	3
experience maintaining risk registers, documenting findings, and tracking corrective actions.	Required	3
6. Experience developing security documentation, policies, procedures, assessment reports, and executive summaries.	Required	5
Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership.	Required	3
Ability to manage multiple security assessments, compliance activities, and competing deadlines.	Required	3

Dice Id: 91091585
Position Id: 2335-37720-1792768515
Posted 8 hours ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

IT Security Analyst 2

Richmond, Virginia

•

Yesterday

Easy Apply

Contract

Depends on Experience

IT Security Analyst

Remote or Richmond, Virginia

•

Today

Easy Apply

Full-time, Part-time, Contract, Third Party

IT Security Analyst 2

Richmond, Virginia

•

Today

Easy Apply

Contract, Third Party

Depends on Experience

IT Security Governance Analyst - Remote / Telecommute

Richmond, Virginia

•

Yesterday

Easy Apply

Contract, Third Party

Depends on Experience