IT Security Governance Analyst || Richmond, VA || Remote || Contract || In-Person Interview
Job Summary
We are seeking an experienced IT Security Governance Analyst to support cybersecurity governance, risk management, compliance, and audit activities. The ideal candidate will assess security risks, review compliance with security standards, maintain risk documentation, and coordinate remediation activities across IT teams and business stakeholders.
Key Responsibilities
Conduct security risk assessments, control reviews, and compliance assessments.
Maintain risk registers, assessment records, audit evidence, and corrective-action plans.
Apply security frameworks such as NIST SP 800-53 and relevant regulatory requirements.
Review vendor security questionnaires, SOC reports, and third-party security documentation.
Support IT audits, privacy reviews, data classification, and security policies and procedures.
Prepare compliance reports, risk summaries, and management briefings.
Coordinate security awareness training and evaluate risks associated with emerging technologies and AI.
Required Qualifications
5+ years of experience in cybersecurity, information security, IT security governance, or risk management.
3+ years of experience performing security risk assessments, compliance reviews, or GRC activities.
4+ years of experience applying NIST security frameworks, including NIST SP 800-53.
3+ years of experience conducting security control assessments, supporting IT audits, and tracking remediation activities.
5+ years of experience preparing security documentation, policies, procedures, and assessment reports.
Strong communication, analytical, documentation, and organizational skills.
Preferred Qualifications
Experience with Archer GRC or similar GRC platforms.
Knowledge of VITA SEC530, CIS Controls, CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI.
Experience in third-party risk management, business impact analysis, privacy reviews, and AI governance.
Apply Now: Candidates with strong cybersecurity governance, risk assessment, and compliance experience are encouraged to apply.
Skills Required
- 5+ years of experience in cybersecurity, information security, IT security governance, or risk management
- 3+ years of experience performing security risk assessments, compliance reviews, or GRC activities
- 4+ years of experience applying NIST security frameworks, including NIST SP 800-53
- 3+ years of experience conducting security control assessments, supporting IT audits, and tracking remediation activities
- 5+ years of experience preparing security documentation, policies, procedures, and assessment reports
- Strong communication, analytical, documentation, and organizational skills
- Experience with Archer GRC or similar GRC platforms
- Knowledge of VITA SEC530, CIS Controls, CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI
- Experience in third-party risk management, business impact analysis, privacy reviews, and AI governance
What We Do
Info Origin is an AI-first technology company. We design and deploy intelligent systems that help enterprises operate with clarity, speed, and scale. From advanced analytics to autonomous workflows, our work is grounded in real-world impact. Our approach brings together data, engineering, and AI to modernize applications, unlock insight, and orchestrate complex operations with precision. Our products and platforms extend this capability: AgentFarm — multi-agent, enterprise-grade, policy-governed AI workforce that enables structured execution, resilient workflows, and full auditability, with parallel reasoning, tool orchestration, and real-time observability. Contract Insights — AI-driven clause extraction, NL search multi-document comparison engine for legal and commercial workflows. CDMS — intelligent document creation, collaboration, and compliance, powered by AI-based automation. Info QA — codeless test automation with end-to-end traceability. We partner with organizations to translate AI ambition into measurable outcomes - securely, responsibly, and at scale.
