Cybersecurity Compliance Analyst

Job Title - Cybersecurity Compliance Analyst - 01-5533

**NO CTC - Please do not apply if you can't work directly for us

Must be Local or willing to relocate to the Richmond, VA area from day one. Alternate weeks in Richmond VA office; other week remote. (5 days in office, 5 days remote, repeating). and as required for projects or operational support.

No 100% remote

Top Required Skills

• Understanding of IT regulatory standards and requirements.
• Knowledge of cybersecurity principles, access management, vulnerability management, and regulatory compliance frameworks (e.g., NERC CIP, SOX, NIST, or similar).
• Ability to document and update IT controls for compliance requirements.
• Strong analytical abilities.
• Working knowledge of SQL databases, including the ability to query, analyze, and validate data using SQL to support compliance, audit, and reporting activities.
• Understanding of relational database concepts, database structures, and data integrity principles.
• Ability to extract, review, and interpret data to support compliance assessments, investigations, and evidence gathering.
• Desire and aptitude to learn technical compliance concepts.
• Understanding of IT regulatory standards and requirements.
• Excellent organization and time management skills.
• Must be highly motivated and able to work effectively under minimal supervision in a fast-paced environment.

Soft Skill requirements

• Strong communication skills both verbal and written
• Ability to lead, collaborate, or work effectively in a variety of teams, including multi-disciplinary teams

High Level Project Overview:

The IT Compliance Analyst to assist with implementing and maintaining a compliance program for a group of applications or systems. The IT Compliance Analyst will participate in compliance-related projects, assist with creating effective compliance processes and procedures, and complete compliance-related data requests. The ideal candidate will have a strong understanding of IT regulatory standards and requirements, and a desire to learn technical compliance concepts. Assist with implementing or maintaining a compliance program for a group of applications or systems. Participate in compliance-related projects requiring knowledge of regulatory requirements. Assist with creating effective compliance processes and procedures for systems and applications. Complete compliance-related data requests. Assist with developing plans for remediation. Help identify opportunities for strengthening compliance controls. Raise awareness of current and upcoming policies, regulations, and requirements.

• Working with Experienced Compliance Analysts to leverage both cyber security best practices and apply knowledge of cyber regulatory requirements.
• Working with other internal departments to collect procedural and technical documentation required to demonstrate adherence to cyber requirements.
• Evaluating procedural and technical documentation against compliance obligations to determine relevance and applicability for external auditors and internal investigations.
• Assisting in compliance-related projects requiring basic knowledge of regulatory requirements as well as basic knowledge of security architecture, technology best practices, and business area requirements.
• Assisting with the implementation of training and information sharing sessions.
• Assisting with the development and implementation of compliance processes and procedures for systems and applications.
• Assisting with the evaluation of processes for failure points and assisting with the implementation of controls to mitigate those potential failures.
• Assisting with the assembly of compliance-related data requests.
• Assist with investigations into process failures and assist with developing recommended remediation plans.
• Maintaining policy and program documentation.
• Perform assignments designed to develop work knowledge, skills and abilities requiring application of policies, procedures, techniques and other criteria in carrying out all aspects of the job
• Continue to develop the knowledge, skills, and abilities to reach a higher level of proficiency and work complexity.

Required Years of Experience:

• 3+ years of directly related experience in IT audit or compliance

Education:

• Bachelor in Computer Science, Information Systems, or Cybersecurity

Location = Richmond VA (parking not provided)

Rate = $65-$73/hr a W2 contract

Length = 1+ Years W2 Contract - Possible long term/extension for the right candidate