Information Security Analyst

$114,400 - $114,400/Yr

Business Integra - Richmond, VA

Full-time - Mid Level

Richmond, VA

Professional, Scientific, and Technical Services

About the position

The Information Security Analyst position at Business Integra Inc. is focused on supporting the Virginia Department of Transportation's (VDOT) Information Security mission. The role involves implementing strategic approaches, plans, and procedures to ensure compliance with information security policies and standards, particularly in relation to procurement teams. The analyst will engage in various responsibilities including identity and access management, IT risk management, and security incident management, while collaborating with cross-functional teams to enhance security measures.

Responsibilities

• Documents processes and script narratives/executive summaries.
• Create business-focused documentation for circulation among readers with various technical understanding.
• Share insight on information security and IT procurement approaches and implementation methodologies.
• Research and provide written guidance on alignment with security policies/standards.
• Perform tasks related to security compliance and control evaluation, risk analysis, and procurement recommendations.
• Collaborate with business areas and cross-functional procurement analysts or enterprise architects to understand business needs and provide strategic consultation on security and risk-averse acquisition.
• Partner with architects and other technical team members to develop roadmaps and strategies to support agency KPIs.
• Consult with teams as needed on initiatives and provide tactical direction, as well as considerations on legacy solutions as they are replaced.

Requirements

• Comprehensive knowledge of Information Security principles, including trends, emerging technologies, best practices, controls, and architecture.
• Practical experience with identity and access management, services and software acquisition or procurement, IT risk management, business continuity and IT disaster recovery planning, security awareness education and training, security vulnerability management, and security incident management.
• Familiarity with the Commonwealth of Virginia's Information Security Standards and/or NIST Publication 800-53.
• Effective written and oral communication skills, with the ability to interpret laws and policies and maintain effective working relationships.
• Experience in monitoring IT environments for compliance with information security architecture policies and standards.
• Ability to provide input and security direction for future designs and strategic technology alternatives.
• Excellent written and oral communication and presentation skills, with the ability to simplify complex technical terms.
• Demonstrated ability to work with a broad cross-section of personnel, including management and external entities.

Nice-to-haves

• Experience in cybersecurity and government technology implementation.
• Knowledge of IT procurement.
• Experience in business writing and presenting.

Benefits

• Competitive hourly pay starting from $55.00 per hour.
• Hybrid work environment with in-person requirements.