IT Security Analyst 2

Responsibilities

• Monitor and evaluate information security controls to ensure effective operation and alignment with organizational objectives
• Identify security risks and recommend remediation strategies to strengthen the agency's security posture
• Coordinate and execute IT security-related projects and support security governance initiatives
• Conduct data classification assessments and perform security audits to evaluate compliance with established standards
• Develop, track, and manage remediation plans for identified security findings and vulnerabilities
• Develop and maintain information security policies, procedures, standards, and guidelines
• Coordinate response efforts for information security incidents and support investigation and resolution
• Develop and maintain security awareness programs to promote best practices throughout the organization
• Partner with IT management, Internal Audit, and VITA teams to address compliance requirements

Requirements

• 5 years of experience coordinating and executing IT security-related projects
• 8 years of experience conducting data classification assessments, security audits, and managing remediation plans
• 5 years of experience ensuring internal IT security controls are appropriate and operating as intended
• Must physically reside within the United States for the duration of the assignment
• Must be able to attend an in-person interview
• Must be legally authorized to work in the United States without employer sponsorship

Preferred Qualifications

• 8 years of experience collaborating with IT management, Internal Audit, and VITA to manage security vulnerabilities
• Experience supporting enterprise cybersecurity governance and compliance initiatives
• Experience developing security policies, standards, and procedural documentation
• Experience coordinating security awareness and training programs

Benefits

• 12-month contract position (1099)
• Pay rate: $24 – $44 per hour
• Standard business hours

About the Company

TOMORROW HIRE supports enterprise security initiatives for the Virginia Department of Transportation (VDOT) by providing skilled professionals to monitor, assess, and strengthen information security controls.