Job Title : Cybersecurity GRC Analyst 2 (Remote)
Duration : Long Term Contract
Location : Richmond, VA
Interview : In-Person only
Job Description:
The Cybersecurity GRC Analyst 2 will support the enterprise cybersecurity program by managing Governance, Risk, and Compliance (GRC), security risk assessments, privacy reviews, control assessments, audit readiness, and remediation tracking. The role involves maintaining risk registers, security documentation, and compliance evidence using Archer GRC and other approved tools.
The analyst will interpret and implement applicable security frameworks and regulatory requirements, including VITA SEC530, NIST SP 800-53, CIS Controls, DoD STIGs, CJIS, VCIN, HIPAA, PCI DSS, FERPA, and FTI. Responsibilities include third-party risk assessments, Business Impact Analyses (BIAs), data classification, security and privacy reviews of data-sharing agreements, and support for incident response and business continuity governance.
The role also includes reviewing emerging technologies and AI initiatives, developing security policies and procedures, coordinating audits, tracking corrective actions, preparing executive compliance reports, and collaborating with technical teams, business owners, vendors, auditors, and leadership to strengthen security and regulatory compliance.
Required Experience:
5+ years in cybersecurity, information security, IT security governance, or risk management.
4+ years applying NIST security frameworks, including NIST SP 800-53.
3+ years in GRC activities, security risk assessments, control assessments, IT audits, and remediation tracking.
5+ years developing security documentation, policies, procedures, assessment reports, and executive summaries.
Experience with Archer GRC or similar platforms, third-party risk management, regulatory compliance, and strong communication and stakeholder management skills.
Skills Required
- 5+ years in cybersecurity, information security, IT security governance, or risk management
- 4+ years applying NIST security frameworks, including NIST SP 800-53
- 3+ years performing GRC activities, security risk assessments, control assessments, IT audits, and remediation tracking
- 5+ years developing security documentation, policies, procedures, assessment reports, and executive summaries
- Experience with Archer GRC or similar platforms
- Experience with third-party risk management and regulatory compliance
- Strong communication and stakeholder management skills
What We Do
Info Origin is an AI-first technology company. We design and deploy intelligent systems that help enterprises operate with clarity, speed, and scale. From advanced analytics to autonomous workflows, our work is grounded in real-world impact. Our approach brings together data, engineering, and AI to modernize applications, unlock insight, and orchestrate complex operations with precision. Our products and platforms extend this capability: AgentFarm — multi-agent, enterprise-grade, policy-governed AI workforce that enables structured execution, resilient workflows, and full auditability, with parallel reasoning, tool orchestration, and real-time observability. Contract Insights — AI-driven clause extraction, NL search multi-document comparison engine for legal and commercial workflows. CDMS — intelligent document creation, collaboration, and compliance, powered by AI-based automation. Info QA — codeless test automation with end-to-end traceability. We partner with organizations to translate AI ambition into measurable outcomes - securely, responsibly, and at scale.
.png)
