Description

You will manage risk and policy for the Virginia State Police, focusing on security assessments and compliance.

Responsibilities

• Complete risk assessments, system security plans, and business impact analyses.
• Establish a formal risk assessment program with necessary processes and documentation.
• Create organizational-level policies for risk assessment workflows.
• Lead business and IT resources through risk, control, and impact discovery.
• Collaborate with system and data owners to implement new security structures.

Required Skills

• 10+ years of experience in information security or a related field.
• Proven experience completing Business Impact Analyses and risk assessments.
• Deep knowledge of information systems security principles.
• Extensive experience developing organizational programs, policies, and procedures.
• Demonstrated ability to lead technical and business teams through complex risk discovery.
• Strong analytical, organizational, and decision-making capabilities.
• Ability to communicate complex security issues succinctly to diverse audiences.
• Ability to work on-site in North Chesterfield, VA.
• Must pass a VSP background check.

Preferred Skills

• Extensive experience applying Commonwealth of Virginia security standards (SEC 501, SEC 525, SEC 520, SEC 530) or NIST Risk Management frameworks.
• Fluency in Archer and Microsoft Office.

Key Skills

Education

Any Graduate