IT Security Analyst -Archer GRC

Experience and Skills Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.

VITA SEC
530: 2+ years of experience applying Commonwealth of Virginia information security requirements.

Third-Party

Risk Management:

3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.

Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.

Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.

Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.

Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.

AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.

Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.experience in cybersecurity, information security, IT security governance, or risk management.

Required5

Years experience performing security risk assessments, compliance reviews, or GRC activities.

Required3

Years experience applying NIST security frameworks, including NIST SP 800-53.Required4

Years experience conducting security control assessments and supporting IT audits.

Required3

Years experience maintaining risk registers, documenting findings, and tracking corrective actions.

Required3

Years
6. Experience developing security documentation, policies, procedures, assessment reports, and executive summaries.

Required5

Years Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership.

Required3

Years Ability to manage multiple security assessments, compliance activities, and competing deadlines.

Required3

Years