IT Security Analyst 2

We are looking for IT Security Analyst 2 for our client in Richmond, VA

Job Title: IT Security Analyst 2

Job Location: Richmond, VA

Job Type: Contract

Pay Range: $28 - $33

Job Overview:

The IT Security Analyst monitors and advises on information security issues related to the systems and workflow at an agency to ensure the internal IT security controls for an agency are appropriate and operating as intended. Coordinates and executes IT security related projects for the agency. Coordinates response to information security incidents. Develops and publishes Information Security policies, procedures, standards, and guidelines based on knowledge of best practices and compliance with Commonwealth IT Security policies, standards, and guidelines. Conducts campus-wide data classification assessment and security audits and manages remediation plans.

Requirement/Must Have:

• 5+ years of experience in IT Security field.
• 8+ years of experience conducting campus-wide data classification assessments and security audits.
• 8+ years of experience collaborating with IT management, Internal Audit, and VITA to manage security vulnerabilities.
• 5+ years of experience ensuring that the internal IT security controls for an agency are appropriate and operating as intended.

Responsibilities:

• Monitors and advises on information security issues related to the systems and workflow at an agency.
• Coordinates and executes IT security related projects for the agency.
• Coordinates response to information security incidents.
• Develops and publishes Information Security policies, procedures, standards, and guidelines.
• Conducts campus-wide data classification assessments and security audits and manages remediation plans.
• Collaborates with IT management, Internal Audit, and VITA to manage security vulnerabilities.
• Creates, manages, and maintains user security awareness.
• Conducts security research and keeps abreast of latest security issues.
• Prepares IT security documentation, including department policies and procedures, agency notifications, Web content, and alerts.