Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 32 hours ago

IT Security Analyst 2

TOMORROW HIRE

Where
Richmond, VA, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Security Analyst 2TOMORROW HIRE · Richmond, VA, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on TOMORROW HIRE's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 32 hours ago

The posting

Job Title: IT Security Analyst 2 Work Type: Remote Location: Richmond, VA 23225 Salary/Rate: $66.68/hr Start Date: November 2, 2026 End Date: October 25, 2027 Industry Category: Information Technology / Cybersecurity Employment Type: Contract Requisition ID: 814128

Overview:

The Virginia Department of Corrections (DOC) is seeking an IT Security Analyst 2 to support its enterprise cybersecurity program. This role focuses on security governance, risk management, compliance, privacy, third-party risk, and audit readiness. The analyst will conduct security assessments, maintain risk documentation, support regulatory compliance, and work with technical teams, business owners, vendors, and auditors to identify risks and improve security practices.

Application:

Candidates must provide their current city and state of residence, confirm their ability to attend an in-person interview, and attest that they will physically reside within the United States throughout the assignment. Candidates should also provide a valid email address.

Job Description:

The IT Security Governance Analyst supports the development, implementation, and improvement of DOC's cybersecurity governance and compliance activities. The position evaluates security risks across systems, applications, services, vendors, and technology initiatives; maintains governance records; reviews security controls and data-sharing agreements; and helps ensure compliance with Commonwealth of Virginia and applicable federal requirements. The analyst also supports security awareness training, emerging technology reviews, audit coordination, executive reporting, and corrective-action tracking.

Responsibilities:

  • Conduct security risk assessments, Business Impact Analyses (BIAs), data classification reviews, privacy reviews, control assessments, and security feasibility reviews.
  • Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and remediation tracking in Archer GRC or other approved tools.
  • Apply relevant security frameworks and requirements, including NIST guidance, VITA SEC530, CIS Controls, DoD STIGs, CJIS, VCIN, HIPAA, PCI, FERPA, and FTI.
  • Work with system and data owners to document security plans, assign ownership, classify information, review controls, and maintain audit and authorization evidence.
  • Review third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, and interconnection agreements.
  • Evaluate data-sharing agreements, MOUs, and related documents for security, privacy, access control, least-privilege, data-handling, and incident-notification requirements.
  • Coordinate audits and assessments, validate evidence, document findings, respond to inquiries, and track corrective actions through closure.
  • Develop and maintain security policies, standards, procedures, guidelines, templates, and governance processes.
  • Support security awareness and compliance training, including acknowledgements, tracking, reporting, and stakeholder education.
  • Review emerging technology and artificial intelligence initiatives for security, privacy, compliance, data sensitivity, vendor assurances, and required approvals.
  • Support governance activities related to incident response, disaster recovery, business continuity, audit logging, system hardening, access reviews, and vendor management.
  • Prepare executive and management reports covering security risks, findings, remediation progress, compliance status, metrics, and program priorities.
  • Provide security guidance to project teams, IT operations, procurement, business units, and vendors; facilitate meetings and escalate unresolved risks when needed.
  • Support post-incident governance reviews, control-gap identification, regulatory coordination, and corrective-action tracking.
  • Perform other related duties and special projects as assigned.

Requirements

Minimum Qualifications:

  • At least 5 years of experience in cybersecurity, information security, IT security governance, or risk management.
  • At least 4 years of experience applying NIST security frameworks, including NIST SP 800-53.
  • At least 3 years of experience performing security risk assessments, compliance reviews, or governance, risk, and compliance (GRC) activities.
  • At least 3 years of experience conducting security control assessments and supporting IT audits.
  • At least 3 years of experience maintaining risk registers, documenting findings, and tracking corrective actions.
  • At least 3 years of experience developing security documentation, policies, procedures, assessment reports, and executive summaries.
  • Strong written and verbal communication skills when working with technical teams, business owners, auditors, and leadership.
  • Ability to manage multiple security assessments, compliance activities, and competing deadlines.
  • Ability to analyze technical and business information, identify control gaps, evaluate residual risk, and recommend practical corrective actions.
  • Ability to handle sensitive information with discretion and professional judgment.

Preferred Qualifications:

  • 3+ years of experience using Archer GRC or a comparable governance, risk, and compliance platform.
  • 2+ years of experience applying Commonwealth of Virginia information security requirements, including VITA SEC530.
  • 3+ years of experience reviewing vendor security documentation, SOC reports, and security questionnaires.
  • 3+ years of experience conducting Business Impact Analyses, data classification reviews, and security feasibility assessments.
  • 3+ years of experience working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
  • 2+ years of experience reviewing data-sharing agreements, MOUs, and security and privacy obligations.
  • 2+ years of experience supporting incident response, disaster recovery, or business continuity compliance.
  • 1+ year of experience assessing security, privacy, and compliance risks associated with AI or emerging technologies.
  • 3+ years of experience preparing security metrics, compliance reports, risk summaries, and management briefings.

Benefits

Compensation:

  • Pay Rate: $66.68 per hour

Schedule:

  • Remote position, with occasional onsite attendance in Virginia for meetings as needed.

Work Location:

  • Richmond, VA 23225.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against TOMORROW HIRE's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on TOMORROW HIRE's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    TOMORROW HIRE's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.