Information Security Analyst — Hybrid

Job overview

The Information Security Analyst — Hybrid role is hybrid in Richmond, VA, with approximately two to three days onsite. Compensation is not specified. The analyst supports information security across Virginia Housing programs, projects, IT systems, and applications, working with the Information Security Office. The role helps strengthen security and privacy governance by documenting controls, maintaining policies and standards, and coordinating with business stakeholders and vendors. Its work supports security compliance and ensures projects account for information security and privacy requirements.

What you'll do

• Participate in information security and privacy efforts across business areas and vendor engagements
• update records in a governance, risk, and compliance system
• partner with stakeholders on Information System Security Plans
• represent the Information Security Office in project work
• assist with security standards, controls documentation, risk assessments, system diagrams, and control narratives
• review contracts and vendor documentation for security protections.

What we're looking for

Skills & competencies

information security analyst

hybrid

richmond va

ascending

virginia housing

governance risk and compliance

cybersecurity

privacy

nist

iso 27001

cobit

security controls

vendor risk

Work arrangement

• Weekend coverage required

Why this role

The posting requires at least three years of information security experience related to governance, risk, and compliance. Familiarity with NIST, ISO 27001, or COBIT is requested; security certifications and a relevant bachelor's degree are preferred. The listing describes a two-year contract term and W-2 or 1099 availability, with no C2C.

About the employer

ASCENDING is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.