Information Security Analyst

**Information Security Analyst Contractor** This important role supports information security across all Virginia Housing programs, projects, IT systems, and applications, and is assigned to projects and initiatives with security and privacy components. The Information Security Specialist will assist with cybersecurity and privacy awareness and education efforts throughout Virginia Housing. This role is also responsible for supporting the creation and maintenance of Virginia Housing’s information security and privacy policies and standards. The Information Security Specialist will contribute to ISO efforts and assist with other security-related projects. Virginia Housing is one of the nation’s premier housing finance agencies. Our mission is to help Virginians attain quality, affordable housing through public-private partnerships. This role is part of the Information Security Office within the Legal Division at Virginia Housing’s headquarters. **Responsibilities will include:** * Working within a Governance, Risk, and Compliance (GRC) system to add and update security and risk data, records, and documentation * Partnering with business stakeholders to develop and maintain Information System Security Plans (SSPs) * Participating in information security and privacy efforts across all business areas and supplier engagements to ensure appropriate security controls are in place * Facilitating security information-gathering meetings to collect the information needed to complete SSPs, risk assessments, and other security work products * Representing the Information Security Office in PMO projects to ensure projects and initiatives have appropriate ISO representation * Partnering across teams, collaborating with business units to understand business challenges, developing tailored control options, facilitating compliance requirements, and providing timely, clear communication to stakeholders * Assisting with the development and maintenance of information security standards and processes, including occasional research on best practices from reputable sources * Assisting with controls documentation, including information system diagramming, completing risk assessment templates, and drafting security documentation as needed * Assisting in reviewing contracts, agreements, and other vendor documentation to ensure adequate information security protections are in place **Qualified candidates must possess:** * At least 3 years of demonstrated experience in information security concepts related to governance, risk, and compliance * Extensive knowledge of information security principles and practices * Familiarity with or experience working with security frameworks such as NIST, ISO 27001, or similar * Extensive knowledge of principles and methods related to IT infrastructure planning, implementation, and management * Excellent written and verbal communication skills * Ability to organize tasks, set priorities, meet deadlines, and follow up on assignments with minimal direction * Strong organizational skills and attention to detail * Ability to prioritize continuously and adapt to ambiguous situations * Ability to interpret and understand security documentation, including flow diagrams and process maps * Ability to understand general contract terms and conditions * Ability to create basic diagrams, flowcharts, and spreadsheets using standard desktop software * Ability to write clearly and concisely for various audiences **Preferred experience includes:** * Bachelor’s degree in Computer Science, Information Systems, or equivalent * CISA, CISSP, or equivalent information security certification preferred * Previous experience in the financial services industry preferred * Knowledge of controls related to cloud security and application security * Knowledge of information security regulatory compliance such as GLBA, GDPR, and PCI * Knowledge of privacy regulations such as GDPR, CCPA, and VCDPA * Experience drafting information security and privacy policies, standards, and procedures If you are interested and meet the qualifications, please apply to be considered. Job Type: Contract Pay: $45.00 - $57.00 per hour Expected hours: 40.0 per week Work Location: Hybrid remote in Richmond, VA 23220