Jobs → Data & Analytics → IT Security Analyst

About the Role We are seeking an IT Security Analyst to support the enterprise cybersecurity program. This role involves conducting security risk assessments, compliance reviews, and maintaining risk registers. Key Responsibilities • Conduct security risk assessments, Business Impact Analyses (BIAs), data classifications, and privacy reviews • Apply Commonwealth and agency standards including NIST SP 800-53, CIS Controls, and CJIS/VCIN requirements • Review vendor security documentation, SOC reports, and data-sharing agreements • Coordinate internal/external audits and guide emerging technology/AI governance initiatives Requirements • 5+ years of experience in cybersecurity, information security, IT security governance, or risk management • 3+ years performing security risk assessments, compliance reviews, or GRC activities • 4+ years applying NIST security frameworks (specifically NIST SP 800-53) • 3+ years conducting security control assessments and maintaining risk registers • 5+ years developing security documentation, policies, procedures, and executive summaries • Strong written and verbal communication skills with stakeholders at all levels