Job description

Additional Detail Senior Information Security Compliance Analyst (Hybrid) Anticipated Salary Range: $72,946-$90,000 The State Corporation Commission (SCC) seeks a Senior Information Security Compliance Analyst to join the Office of Technology Governance (OTG). Located in downtown Richmond, the SCC is an independent state agency that balances the interests of citizens, businesses, and customers in regulating Virginias business and economic concerns. Reporting to the Information Security and Privacy Officer, the Senior Information Security Compliance Analyst guides SCC employees with the proper use of technology through required information security awareness training, phishing exercises, data classification, and other organization-wide information security and privacy initiatives. This position offers a hybrid work schedule, which includes 3 days in office and 2 telework days each week, as well as a variety of professional development and training opportunities. Essential Duties and Responsibilities • Lead the review, development, and updating of information security policies, standards, and procedures to align with government regulatory requirements and industry best practices • Create, develop, and execute information security trainings using the KnowBe4 training platform • Develop and conduct SCC-wide security awareness programs for employees, including phishing prevention and response activities, to promote a strong culture of security throughout the organization • Implement security controls, ensuring adherence to established standards across the organization • Conduct risk assessments to identify and evaluate security risks across systems, applications, and processes • Identify and recommend mitigation strategies for risk assessments • Independently participate in information technology projects including providing information security support and guidance on security requirements, providing technical resolution and configuration requirements for system issues related to IT or security projects, and collaborating with project team members • Provide advanced technical support for compliance tools and technologies to ensure their effective operation and continuous improvement • Ensure security practices and tools are in compliance with relevant regulations, standards, and frameworks • Research and remain up to date with emerging security threats, technologies, regulatory changes, and industry best practices to identify opportunities for improvement • Provide guidance, training, and mentorship to junior analysts • Provide security support while on-call, analyze information, and escalate as required • Perform additional duties as required Please Note: SCC only accepts applications received through its career center site. Applications submitted through Virginia Jobs site directly will not be considered. For more information and to apply for this position directly on the SCC Career Center website, click the Additional Detail button on this page. To view all current SCC job openings, visit the SCC Career Center website and click the Search button under Job Search.

Requirements

Must-haves

Additional Detail
Senior Information Security Compliance Analyst (Hybrid)
Essential Duties and Responsibilities
Lead the review, development, and updating of information security policies, standards, and procedures to align with government regulatory requirements and industry best practices
Create, develop, and execute information security trainings using the KnowBe4 training platform
Develop and conduct SCC-wide security awareness programs for employees, including phishing prevention and response activities, to promote a strong culture of security throughout the organization
Implement security controls, ensuring adherence to established standards across the organization
Conduct risk assessments to identify and evaluate security risks across systems, applications, and processes
Identify and recommend mitigation strategies for risk assessments
Provide advanced technical support for compliance tools and technologies to ensure their effective operation and continuous improvement
Ensure security practices and tools are in compliance with relevant regulations, standards, and frameworks
Research and remain up to date with emerging security threats, technologies, regulatory changes, and industry best practices to identify opportunities for improvement
Provide guidance, training, and mentorship to junior analysts
Provide security support while on-call, analyze information, and escalate as required
Perform additional duties as required
Please Note: SCC only accepts applications received through its career center site. Applications submitted through Virginia Jobs site directly will not be considered.
For more information and to apply for this position directly on the SCC Career Center website, click the Additional Detail button on this page.
To view all current SCC job openings, visit the SCC Career Center website and click the Search button under Job Search.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: careers-html
Effort: medium

Benefits

Benefits detected in the listing.

Professional Development