Security & Safety,Administration,Administration|Data Entry Jobs

Job Description

Develop, implement, manage, and continuously improve Stratas Foods' total process safety Management Program for processes and equipment presenting significant chemical, pressure, thermal, mechanical, fire, explosion, or stored-energy hazards. Program scope includes PSM/RMP-covered processes as well as other total process safety critical systems, including ammonia and CO2 refrigeration systems, boilers, compressed air systems, nitrogen generation and distribution systems, caustic and other hazardous chemical processes, combustible dust hazards, steam and condensate systems, hot liquids, cooking oil systems, and other applicable process hazards. Establish risk-based corporate standards, procedures, and minimum requirements to prevent significant releases, fires, explosions, equipment failures, and other total process safety incidents. This position will report to the Environmental Manager.

The Sr. Process Safety Management Analyst position requires up to 25% travel (or one week a month) to the various facilities of responsibility. This position can be based in Decatur, IL or Memphis, TN.

Essential Duties & Responsibilities

1. PSM Program Development: Develop, implement, maintain, and continuously improve Stratas Foods' total process safety management systems covering regulated and non-regulated processes presenting significant chemical, pressure, thermal, fire, explosion, mechanical, or stored-energy hazards. Develop and monitor leading and lagging total process safety performance indicators to evaluate program effectiveness, identify systemic trends, prioritize risk reduction opportunities, and communicate total process safety performance to facility and executive leadership.
2. Compliance Metrics: Determine regulatory applicability and oversee compliance with applicable total process safety requirements, including OSHA PSM, EPA RMP, and other federal, state, local, and applicable code requirements. Serve as a company total process safety representative during applicable regulatory interactions.
3. Process Hazard Identification, Risk Assessment and Total Process Safety: Develop and oversee risk-based processes for identifying, evaluating, prioritizing, and controlling process hazards, including PHA and other appropriate hazard-assessment methodologies. Establish requirements for maintaining accurate total process safety and technical information for total process safety critical equipment and systems. Partner with Engineering, Operations, Maintenance, Refrigeration contractors, EHS, and facility leadership to identify and evaluate total process safety impacts associated with new or modified equipment, processes, chemicals, technology, procedures, and operating conditions. Lead the implementation and integration of new or revised total process safety programs, corporate standards, regulatory requirements, and risk-control initiatives across applicable facilities. 
4. Risk Assessment and Evaluation: Where applicable provide total process safety oversight for chemical, thermal, fire, and explosion hazards, including caustic and other hazardous chemicals, hot cooking oils and process liquids, steam and condensate systems, and combustible dust where applicable. Evaluate process hazards and support the development and implementation of appropriate engineering, administration, inspection, maintenance, and operational controls based on risk. 
5. Pressure Vessel Inspections and Asset Integrity: Work with Maintenance and Engineering to coordinate regularly recurring pressure vessel inspections and develop/oversee corporate mechanical integrity requirements for total process safety-critical equipment and systems. Ensure Recognized and Generally Accepted Good Engineering Practices (RAGAGEP), applicable codes, standards, manufacturer recommendations are implemented and followed.  
6. Critical Safety Device Management: Develop, implement, and maintain Stratas Foods' Critical Safety Device Program, including the identification and documentation of applicable critical safety devices. Partner with Maintenance and other applicable functions to establish requirements for inspection, testing, impairment management, deficiency resolution, and verification of critical engineered safeguards. 
7. Emergency Preparedness and Response: Provide oversight and technical guidance for emergency action and response planning involving applicable total process safety hazards, including regulated and non-regulated processes. Coordinate with facility leadership, EHS, emergency responders, and applicable local agencies to ensure emergency plans, notification systems, drills/exercises, equipment, and response capabilities remain appropriate for facility hazards. 
8. Regulatory Applicability / RMP Submittals: Evaluate facilities and process changes for applicability under OSHA PSM, EPA RMP, and other applicable total process safety requirements. Coordinate preparation, certification, updates, and submission of required Risk Management Plans and associated regulatory documentation. 
9. Policy Administration and Communication: This position shall initiate and lead monthly PSM committee meetings involving affected managers and team members including but not limited to the Plant Manager, refrigeration manager, maintenance manager, safety managers, refrigeration team members, and appropriate production management personnel. This position will also act as company liaison in dealing with federal agencies, such as EPA and OSHA, as they pertain to the PSM/RMP program.  Coordinates presentation of Company’s position to this agency with assistance of Health & Safety Manager and legal counsel. collect, maintain, and organize all information related to the 14 elements of the Stratas PSM and RMP Programs. Additionally, this position should support refrigeration management with budgeting related to PSM covered processes and support refrigeration management in the development and implementation of training related to PSM covered processes. Lead or support, as appropriate, investigations of total process safety incidents and near misses involving applicable processes. Facilitate or support root cause analyses, identify systemic and programmatic causes, develop corrective actions, communicate lessons learned across facilities, and evaluate trends to prevent recurrence.
10. Site EHS Functional Leadership and Coaching: Provide functional total process safety leadership, coaching, technical guidance, and ongoing support to facility EHS personnel. Conduct periodic individual check-ins to review total process safety performance, priorities, concerns, program implementation, corrective actions, and development needs.
11. Auditing, Assurance and Corrective Action Management: Work with site and refrigeration contractors to complete required compliance audits for ammonia refrigeration systems. Develop and execute total process safety audits, assessments, and field verification activities; manage findings and recommendations; assess systemic issues; monitor corrective actions; verify closure; and escalate significant risks.
12. Training and Development: This position will be responsible for developing and delivering required PSM/RMP training covering applicable regulatory requirements, Stratas Foods standards, process hazards, hazard recognition, inspections, gap resolution, and total process safety management systems. The position will build process safety knowledge and competency among facility EHS personnel and other applicable employees.
13. Contractor Management: Establish and oversee PSM/RMP contractor safety requirements for contractors performing work on or near a covered process. Partner with facility personnel to ensure contractor qualification, hazard communication, training verification, safe work practices, performance evaluation, and required PSM documentation are completed and maintained.
14. Collaborate closely with onsite teams and participate in onsite meetings to drive departmental objectives.  

Job Description

Develop, implement, manage, and continuously improve Stratas Foods' total process safety Management Program for processes and equipment presenting significant chemical, pressure, thermal, mechanical, fire, explosion, or stored-energy hazards. Program scope includes PSM/RMP-covered processes as well as other total process safety critical systems, including ammonia and CO2 refrigeration systems, boilers, compressed air systems, nitrogen generation and distribution systems, caustic and other hazardous chemical processes, combustible dust hazards, steam and condensate systems, hot liquids, cooking oil systems, and other applicable process hazards. Establish risk-based corporate standards, procedures, and minimum requirements to prevent significant releases, fires, explosions, equipment failures, and other total process safety incidents. This position will report to the Environmental Manager.

The Sr. Process Safety Management Analyst position requires up to 25% travel (or one week a month) to the various facilities of responsibility. This position can be based in Decatur, IL or Memphis, TN.

Essential Duties & Responsibilities

1. PSM Program Development: Develop, implement, maintain, and continuously improve Stratas Foods' total process safety management systems covering regulated and non-regulated processes presenting significant chemical, pressure, thermal, fire, explosion, mechanical, or stored-energy hazards. Develop and monitor leading and lagging total process safety performance indicators to evaluate program effectiveness, identify systemic trends, prioritize risk reduction opportunities, and communicate total process safety performance to facility and executive leadership.
2. Compliance Metrics: Determine regulatory applicability and oversee compliance with applicable total process safety requirements, including OSHA PSM, EPA RMP, and other federal, state, local, and applicable code requirements. Serve as a company total process safety representative during applicable regulatory interactions.
3. Process Hazard Identification, Risk Assessment and Total Process Safety: Develop and oversee risk-based processes for identifying, evaluating, prioritizing, and controlling process hazards, including PHA and other appropriate hazard-assessment methodologies. Establish requirements for maintaining accurate total process safety and technical information for total process safety critical equipment and systems. Partner with Engineering, Operations, Maintenance, Refrigeration contractors, EHS, and facility leadership to identify and evaluate total process safety impacts associated with new or modified equipment, processes, chemicals, technology, procedures, and operating conditions. Lead the implementation and integration of new or revised total process safety programs, corporate standards, regulatory requirements, and risk-control initiatives across applicable facilities. 
4. Risk Assessment and Evaluation: Where applicable provide total process safety oversight for chemical, thermal, fire, and explosion hazards, including caustic and other hazardous chemicals, hot cooking oils and process liquids, steam and condensate systems, and combustible dust where applicable. Evaluate process hazards and support the development and implementation of appropriate engineering, administration, inspection, maintenance, and operational controls based on risk. 
5. Pressure Vessel Inspections and Asset Integrity: Work with Maintenance and Engineering to coordinate regularly recurring pressure vessel inspections and develop/oversee corporate mechanical integrity requirements for total process safety-critical equipment and systems. Ensure Recognized and Generally Accepted Good Engineering Practices (RAGAGEP), applicable codes, standards, manufacturer recommendations are implemented and followed.  
6. Critical Safety Device Management: Develop, implement, and maintain Stratas Foods' Critical Safety Device Program, including the identification and documentation of applicable critical safety devices. Partner with Maintenance and other applicable functions to establish requirements for inspection, testing, impairment management, deficiency resolution, and verification of critical engineered safeguards. 
7. Emergency Preparedness and Response: Provide oversight and technical guidance for emergency action and response planning involving applicable total process safety hazards, including regulated and non-regulated processes. Coordinate with facility leadership, EHS, emergency responders, and applicable local agencies to ensure emergency plans, notification systems, drills/exercises, equipment, and response capabilities remain appropriate for facility hazards. 
8. Regulatory Applicability / RMP Submittals: Evaluate facilities and process changes for applicability under OSHA PSM, EPA RMP, and other applicable total process safety requirements. Coordinate preparation, certification, updates, and submission of required Risk Management Plans and associated regulatory documentation. 
9. Policy Administration and Communication: This position shall initiate and lead monthly PSM committee meetings involving affected managers and team members including but not limited to the Plant Manager, refrigeration manager, maintenance manager, safety managers, refrigeration team members, and appropriate production management personnel. This position will also act as company liaison in dealing with federal agencies, such as EPA and OSHA, as they pertain to the PSM/RMP program.  Coordinates presentation of Company’s position to this agency with assistance of Health & Safety Manager and legal counsel. collect, maintain, and organize all information related to the 14 elements of the Stratas PSM and RMP Programs. Additionally, this position should support refrigeration management with budgeting related to PSM covered processes and support refrigeration management in the development and implementation of training related to PSM covered processes. Lead or support, as appropriate, investigations of total process safety incidents and near misses involving applicable processes. Facilitate or support root cause analyses, identify systemic and programmatic causes, develop corrective actions, communicate lessons learned across facilities, and evaluate trends to prevent recurrence.
10. Site EHS Functional Leadership and Coaching: Provide functional total process safety leadership, coaching, technical guidance, and ongoing support to facility EHS personnel. Conduct periodic individual check-ins to review total process safety performance, priorities, concerns, program implementation, corrective actions, and development needs.
11. Auditing, Assurance and Corrective Action Management: Work with site and refrigeration contractors to complete required compliance audits for ammonia refrigeration systems. Develop and execute total process safety audits, assessments, and field verification activities; manage findings and recommendations; assess systemic issues; monitor corrective actions; verify closure; and escalate significant risks.
12. Training and Development: This position will be responsible for developing and delivering required PSM/RMP training covering applicable regulatory requirements, Stratas Foods standards, process hazards, hazard recognition, inspections, gap resolution, and total process safety management systems. The position will build process safety knowledge and competency among facility EHS personnel and other applicable employees.
13. Contractor Management: Establish and oversee PSM/RMP contractor safety requirements for contractors performing work on or near a covered process. Partner with facility personnel to ensure contractor qualification, hazard communication, training verification, safe work practices, performance evaluation, and required PSM documentation are completed and maintained.
14. Collaborate closely with onsite teams and participate in onsite meetings to drive departmental objectives.  

Job Description

Develop, implement, manage, and continuously improve Stratas Foods' total process safety Management Program for processes and equipment presenting significant chemical, pressure, thermal, mechanical, fire, explosion, or stored-energy hazards. Program scope includes PSM/RMP-covered processes as well as other total process safety critical systems, including ammonia and CO2 refrigeration systems, boilers, compressed air systems, nitrogen generation and distribution systems, caustic and other hazardous chemical processes, combustible dust hazards, steam and condensate systems, hot liquids, cooking oil systems, and other applicable process hazards. Establish risk-based corporate standards, procedures, and minimum requirements to prevent significant releases, fires, explosions, equipment failures, and other total process safety incidents. This position will report to the Environmental Manager.

The Sr. Process Safety Management Analyst position requires up to 25% travel (or one week a month) to the various facilities of responsibility. This position can be based in Decatur, IL or Memphis, TN.

Essential Duties & Responsibilities

1. PSM Program Development: Develop, implement, maintain, and continuously improve Stratas Foods' total process safety management systems covering regulated and non-regulated processes presenting significant chemical, pressure, thermal, fire, explosion, mechanical, or stored-energy hazards. Develop and monitor leading and lagging total process safety performance indicators to evaluate program effectiveness, identify systemic trends, prioritize risk reduction opportunities, and communicate total process safety performance to facility and executive leadership.
2. Compliance Metrics: Determine regulatory applicability and oversee compliance with applicable total process safety requirements, including OSHA PSM, EPA RMP, and other federal, state, local, and applicable code requirements. Serve as a company total process safety representative during applicable regulatory interactions.
3. Process Hazard Identification, Risk Assessment and Total Process Safety: Develop and oversee risk-based processes for identifying, evaluating, prioritizing, and controlling process hazards, including PHA and other appropriate hazard-assessment methodologies. Establish requirements for maintaining accurate total process safety and technical information for total process safety critical equipment and systems. Partner with Engineering, Operations, Maintenance, Refrigeration contractors, EHS, and facility leadership to identify and evaluate total process safety impacts associated with new or modified equipment, processes, chemicals, technology, procedures, and operating conditions. Lead the implementation and integration of new or revised total process safety programs, corporate standards, regulatory requirements, and risk-control initiatives across applicable facilities. 
4. Risk Assessment and Evaluation: Where applicable provide total process safety oversight for chemical, thermal, fire, and explosion hazards, including caustic and other hazardous chemicals, hot cooking oils and process liquids, steam and condensate systems, and combustible dust where applicable. Evaluate process hazards and support the development and implementation of appropriate engineering, administration, inspection, maintenance, and operational controls based on risk. 
5. Pressure Vessel Inspections and Asset Integrity: Work with Maintenance and Engineering to coordinate regularly recurring pressure vessel inspections and develop/oversee corporate mechanical integrity requirements for total process safety-critical equipment and systems. Ensure Recognized and Generally Accepted Good Engineering Practices (RAGAGEP), applicable codes, standards, manufacturer recommendations are implemented and followed.  
6. Critical Safety Device Management: Develop, implement, and maintain Stratas Foods' Critical Safety Device Program, including the identification and documentation of applicable critical safety devices. Partner with Maintenance and other applicable functions to establish requirements for inspection, testing, impairment management, deficiency resolution, and verification of critical engineered safeguards. 
7. Emergency Preparedness and Response: Provide oversight and technical guidance for emergency action and response planning involving applicable total process safety hazards, including regulated and non-regulated processes. Coordinate with facility leadership, EHS, emergency responders, and applicable local agencies to ensure emergency plans, notification systems, drills/exercises, equipment, and response capabilities remain appropriate for facility hazards. 
8. Regulatory Applicability / RMP Submittals: Evaluate facilities and process changes for applicability under OSHA PSM, EPA RMP, and other applicable total process safety requirements. Coordinate preparation, certification, updates, and submission of required Risk Management Plans and associated regulatory documentation. 
9. Policy Administration and Communication: This position shall initiate and lead monthly PSM committee meetings involving affected managers and team members including but not limited to the Plant Manager, refrigeration manager, maintenance manager, safety managers, refrigeration team members, and appropriate production management personnel. This position will also act as company liaison in dealing with federal agencies, such as EPA and OSHA, as they pertain to the PSM/RMP program.  Coordinates presentation of Company’s position to this agency with assistance of Health & Safety Manager and legal counsel. collect, maintain, and organize all information related to the 14 elements of the Stratas PSM and RMP Programs. Additionally, this position should support refrigeration management with budgeting related to PSM covered processes and support refrigeration management in the development and implementation of training related to PSM covered processes. Lead or support, as appropriate, investigations of total process safety incidents and near misses involving applicable processes. Facilitate or support root cause analyses, identify systemic and programmatic causes, develop corrective actions, communicate lessons learned across facilities, and evaluate trends to prevent recurrence.
10. Site EHS Functional Leadership and Coaching: Provide functional total process safety leadership, coaching, technical guidance, and ongoing support to facility EHS personnel. Conduct periodic individual check-ins to review total process safety performance, priorities, concerns, program implementation, corrective actions, and development needs.
11. Auditing, Assurance and Corrective Action Management: Work with site and refrigeration contractors to complete required compliance audits for ammonia refrigeration systems. Develop and execute total process safety audits, assessments, and field verification activities; manage findings and recommendations; assess systemic issues; monitor corrective actions; verify closure; and escalate significant risks.
12. Training and Development: This position will be responsible for developing and delivering required PSM/RMP training covering applicable regulatory requirements, Stratas Foods standards, process hazards, hazard recognition, inspections, gap resolution, and total process safety management systems. The position will build process safety knowledge and competency among facility EHS personnel and other applicable employees.
13. Contractor Management: Establish and oversee PSM/RMP contractor safety requirements for contractors performing work on or near a covered process. Partner with facility personnel to ensure contractor qualification, hazard communication, training verification, safe work practices, performance evaluation, and required PSM documentation are completed and maintained.
14. Collaborate closely with onsite teams and participate in onsite meetings to drive departmental objectives.  

Job Description: Level I: 0-3 years of experience. The Security job family forms the Security track within the IT function. Security Analysts administer, maintain, develop, and implement policies and procedures for ensuring the security and integrity of PPG's systems. They provide specialized technical knowledge. They contribute to establishing security-related policies by identifying opportunities for effective use security tools and procedures.

o We are ideally looking for candidates with at least a Bachelor's degree
o The candidates, at minimum, need to have experience and competency with Active Directory, ideally beyond helpdesk-type functions like password resets.

Job Title: IT Security Analyst 2
Work Type: Remote
Location: Richmond, VA 23225
Rate: $32/hr-$52/hr
Start Date: November 2, 2026
End Date: October 25, 2027
Industry Category: Information Technology / Cybersecurity
Employment Type: Contract
Requisition ID: (phone number removed)

Overview:

The Virginia Department of Corrections (DOC) is seeking an IT Security Analyst 2 to support its enterprise cybersecurity program. This role focuses on security governance, risk management, compliance, privacy, third-party risk, and audit readiness. The analyst will conduct security assessments, maintain risk documentation, support regulatory compliance, and work with technical teams, business owners, vendors, and auditors to identify risks and improve security practices.

Application:

Candidates must provide their current city and state of residence, confirm their ability to attend an in-person interview, and attest that they will physically reside within the United States throughout the assignment. Candidates should also provide a valid email address.

Job Description:

The IT Security Governance Analyst supports the development, implementation, and improvement of DOC's cybersecurity governance and compliance activities. The position evaluates security risks across systems, applications, services, vendors, and technology initiatives; maintains governance records; reviews security controls and data-sharing agreements; and helps ensure compliance with Commonwealth of Virginia and applicable federal requirements. The analyst also supports security awareness training, emerging technology reviews, audit coordination, executive reporting, and corrective-action tracking.

Responsibilities:

• Conduct security risk assessments, Business Impact Analyses (BIAs), data classification reviews, privacy reviews, control assessments, and security feasibility reviews.
• Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and remediation tracking in Archer GRC or other approved tools.
• Apply relevant security frameworks and requirements, including NIST guidance, VITA SEC530, CIS Controls, DoD STIGs, CJIS, VCIN, HIPAA, PCI, FERPA, and FTI.
• Work with system and data owners to document security plans, assign ownership, classify information, review controls, and maintain audit and authorization evidence.
• Review third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, and interconnection agreements.
• Evaluate data-sharing agreements, MOUs, and related documents for security, privacy, access control, least-privilege, data-handling, and incident-notification requirements.
• Coordinate audits and assessments, validate evidence, document findings, respond to inquiries, and track corrective actions through closure.
• Develop and maintain security policies, standards, procedures, guidelines, templates, and governance processes.
• Support security awareness and compliance training, including acknowledgements, tracking, reporting, and stakeholder education.
• Review emerging technology and artificial intelligence initiatives for security, privacy, compliance, data sensitivity, vendor assurances, and required approvals.
• Support governance activities related to incident response, disaster recovery, business continuity, audit logging, system hardening, access reviews, and vendor management.
• Prepare executive and management reports covering security risks, findings, remediation progress, compliance status, metrics, and program priorities.
• Provide security guidance to project teams, IT operations, procurement, business units, and vendors; facilitate meetings and escalate unresolved risks when needed.
• Support post-incident governance reviews, control-gap identification, regulatory coordination, and corrective-action tracking.
• Perform other related duties and special projects as assigned.

Requirements

Minimum Qualifications:

• At least 5 years of experience in cybersecurity, information security, IT security governance, or risk management.
• At least 4 years of experience applying NIST security frameworks, including NIST SP 800-53.
• At least 3 years of experience performing security risk assessments, compliance reviews, or governance, risk, and compliance (GRC) activities.
• At least 3 years of experience conducting security control assessments and supporting IT audits.
• At least 3 years of experience maintaining risk registers, documenting findings, and tracking corrective actions.
• At least 3 years of experience developing security documentation, policies, procedures, assessment reports, and executive summaries.
• Strong written and verbal communication skills when working with technical teams, business owners, auditors, and leadership.
• Ability to manage multiple security assessments, compliance activities, and competing deadlines.
• Ability to analyze technical and business information, identify control gaps, evaluate residual risk, and recommend practical corrective actions.
• Ability to handle sensitive information with discretion and professional judgment.

Preferred Qualifications:

• 3+ years of experience using Archer GRC or a comparable governance, risk, and compliance platform.
• 2+ years of experience applying Commonwealth of Virginia information security requirements, including VITA SEC530.
• 3+ years of experience reviewing vendor security documentation, SOC reports, and security questionnaires.
• 3+ years of experience conducting Business Impact Analyses, data classification reviews, and security feasibility assessments.
• 3+ years of experience working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
• 2+ years of experience reviewing data-sharing agreements, MOUs, and security and privacy obligations.
• 2+ years of experience supporting incident response, disaster recovery, or business continuity compliance.
• 1+ year of experience assessing security, privacy, and compliance risks associated with AI or emerging technologies.
• 3+ years of experience preparing security metrics, compliance reports, risk summaries, and management briefings.

Benefits

Compensation:

• Pay Rate: $32/hr-$52/hr

Schedule:

• Remote position, with occasional onsite attendance in Virginia for meetings as needed.

Work Location:

• Richmond, VA 23225.

Ideal Candidate Profile: Seeking an IT Security Analyst with experience in cybersecurity governance, risk management, compliance, and privacy assessments, preferably within Commonwealth of Virginia or government environments. Must have experience with Archer GRC, VITA SEC530, NIST frameworks, third-party risk assessments, audit coordination, and regulatory compliance. Strong documentation, risk remediation, executive reporting, and stakeholder communication skills are essential.

Job Duties & Responsibilities
Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, services, integrations, and technology initiatives.
Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and other approved agency tools. Track remediation commitments, due dates, residual risk, and required executive decisions.
Apply and interpret Commonwealth and agency requirements, including VITA SEC530, NIST guidance, CIS Controls, DoD STIGs, CJIS and VCIN requirements, and applicable HIPAA, PCI, FERPA, FTI, privacy, and contractual obligations.
Partner with system owners and data owners to establish ownership, classify information, document security plans and controls, complete periodic reviews, and maintain evidence needed for authorization, audit, and ongoing compliance.
Review vendor and third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, MOUs, MOAs, NDAs, and other interconnection documentation. Identify conditions, gaps, compensating controls, and escalation needs.
Support interconnection and data-sharing governance by reviewing MOUs and related agreements for security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements.
Coordinate audit, assessment, and oversight activities; collect and validate evidence; respond to inquiries; document findings; and manage corrective actions through closure with internal audit, VITA, and other authorized reviewers.
Develop, maintain, and communicate security policies, standards, procedures, guidelines, templates, and governance processes. Recommend practical improvements that strengthen compliance and reduce risk.
Support the agency security awareness and training program, including targeted compliance training, acknowledgements, tracking, reporting, and education for system owners, technical staff, and other stakeholders.
Perform governance reviews for emerging technology and artificial intelligence initiatives. Evaluate business purpose, data sensitivity, privacy, security, human oversight, vendor assurances, risks, and required approvals; document outcomes and handoffs.
Assist with security planning for continuity, incident response, disaster recovery, business continuity, audit logging, configuration and hardening, access reviews, vendor management, and other control areas.
Prepare accurate executive, management, and Commonwealth reporting on governance workload, system inventory, risks, findings, remediation progress, compliance status, metrics, and program priorities.
Provide clear security guidance to project teams, operational IT, procurement, business units, and vendors. Facilitate meetings, communicate requirements professionally, and escalate unresolved risk or noncompliance through established channels.
Participate in incident and post-incident governance activities as assigned, including documentation review, control-gap identification, privacy or regulatory coordination, and corrective-action tracking.
Perform other related duties and special projects in support of the IT Security Governance program.

Knowledge Skills & Abilities
Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
Knowledge of security frameworks and standards such as NIST 800-53, VITA SEC530, CIS Controls, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
Ability to analyze technical and business information, identify risk, distinguish control gaps from acceptable residual risk, and recommend clear, defensible actions.
Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence.
Ability to manage multiple complex assignments, prioritize work under deadlines, and follow through on actions involving many stakeholders.

Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical business partners.
Ability to handle sensitive information with sound judgment, discretion, and a service-oriented approach.


Experience & Skills
Archer GRC: Experience using Archer or comparable governance, risk, and compliance platforms.
VITA SEC530: Experience applying Commonwealth of Virginia information security requirements.
Third-Party Risk Management: Reviewing vendor security documentation, SOC reports, and security questionnaires.
Business Impact Analysis:Conducting BIAs, data classification reviews, and security feasibility assessments.
Regulatory Compliance: Working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
Privacy and Data Sharing: Reviewing data-sharing agreements, MOUs, and security/privacy obligations.
Incident Response and Continuity Governance:Supporting incident response, disaster recovery, or business continuity compliance.
AI and Emerging Technology Governance: Assessing security, privacy, and compliance risks associated with emerging technologies.
Executive Reporting: Preparing security metrics, compliance reports, risk summaries, and management briefings.

Job Description

Develop, implement, manage, and continuously improve Stratas Foods' total process safety Management Program for processes and equipment presenting significant chemical, pressure, thermal, mechanical, fire, explosion, or stored-energy hazards. Program scope includes PSM/RMP-covered processes as well as other total process safety critical systems, including ammonia and CO2 refrigeration systems, boilers, compressed air systems, nitrogen generation and distribution systems, caustic and other hazardous chemical processes, combustible dust hazards, steam and condensate systems, hot liquids, cooking oil systems, and other applicable process hazards. Establish risk-based corporate standards, procedures, and minimum requirements to prevent significant releases, fires, explosions, equipment failures, and other total process safety incidents. This position will report to the Environmental Manager.

The Sr. Process Safety Management Analyst position requires up to 25% travel (or one week a month) to the various facilities of responsibility. This position can be based in Decatur, IL or Memphis, TN.

Essential Duties & Responsibilities

1. PSM Program Development: Develop, implement, maintain, and continuously improve Stratas Foods' total process safety management systems covering regulated and non-regulated processes presenting significant chemical, pressure, thermal, fire, explosion, mechanical, or stored-energy hazards. Develop and monitor leading and lagging total process safety performance indicators to evaluate program effectiveness, identify systemic trends, prioritize risk reduction opportunities, and communicate total process safety performance to facility and executive leadership.
2. Compliance Metrics: Determine regulatory applicability and oversee compliance with applicable total process safety requirements, including OSHA PSM, EPA RMP, and other federal, state, local, and applicable code requirements. Serve as a company total process safety representative during applicable regulatory interactions.
3. Process Hazard Identification, Risk Assessment and Total Process Safety: Develop and oversee risk-based processes for identifying, evaluating, prioritizing, and controlling process hazards, including PHA and other appropriate hazard-assessment methodologies. Establish requirements for maintaining accurate total process safety and technical information for total process safety critical equipment and systems. Partner with Engineering, Operations, Maintenance, Refrigeration contractors, EHS, and facility leadership to identify and evaluate total process safety impacts associated with new or modified equipment, processes, chemicals, technology, procedures, and operating conditions. Lead the implementation and integration of new or revised total process safety programs, corporate standards, regulatory requirements, and risk-control initiatives across applicable facilities. 
4. Risk Assessment and Evaluation: Where applicable provide total process safety oversight for chemical, thermal, fire, and explosion hazards, including caustic and other hazardous chemicals, hot cooking oils and process liquids, steam and condensate systems, and combustible dust where applicable. Evaluate process hazards and support the development and implementation of appropriate engineering, administration, inspection, maintenance, and operational controls based on risk. 
5. Pressure Vessel Inspections and Asset Integrity: Work with Maintenance and Engineering to coordinate regularly recurring pressure vessel inspections and develop/oversee corporate mechanical integrity requirements for total process safety-critical equipment and systems. Ensure Recognized and Generally Accepted Good Engineering Practices (RAGAGEP), applicable codes, standards, manufacturer recommendations are implemented and followed.  
6. Critical Safety Device Management: Develop, implement, and maintain Stratas Foods' Critical Safety Device Program, including the identification and documentation of applicable critical safety devices. Partner with Maintenance and other applicable functions to establish requirements for inspection, testing, impairment management, deficiency resolution, and verification of critical engineered safeguards. 
7. Emergency Preparedness and Response: Provide oversight and technical guidance for emergency action and response planning involving applicable total process safety hazards, including regulated and non-regulated processes. Coordinate with facility leadership, EHS, emergency responders, and applicable local agencies to ensure emergency plans, notification systems, drills/exercises, equipment, and response capabilities remain appropriate for facility hazards. 
8. Regulatory Applicability / RMP Submittals: Evaluate facilities and process changes for applicability under OSHA PSM, EPA RMP, and other applicable total process safety requirements. Coordinate preparation, certification, updates, and submission of required Risk Management Plans and associated regulatory documentation. 
9. Policy Administration and Communication: This position shall initiate and lead monthly PSM committee meetings involving affected managers and team members including but not limited to the Plant Manager, refrigeration manager, maintenance manager, safety managers, refrigeration team members, and appropriate production management personnel. This position will also act as company liaison in dealing with federal agencies, such as EPA and OSHA, as they pertain to the PSM/RMP program.  Coordinates presentation of Company’s position to this agency with assistance of Health & Safety Manager and legal counsel. collect, maintain, and organize all information related to the 14 elements of the Stratas PSM and RMP Programs. Additionally, this position should support refrigeration management with budgeting related to PSM covered processes and support refrigeration management in the development and implementation of training related to PSM covered processes. Lead or support, as appropriate, investigations of total process safety incidents and near misses involving applicable processes. Facilitate or support root cause analyses, identify systemic and programmatic causes, develop corrective actions, communicate lessons learned across facilities, and evaluate trends to prevent recurrence.
10. Site EHS Functional Leadership and Coaching: Provide functional total process safety leadership, coaching, technical guidance, and ongoing support to facility EHS personnel. Conduct periodic individual check-ins to review total process safety performance, priorities, concerns, program implementation, corrective actions, and development needs.
11. Auditing, Assurance and Corrective Action Management: Work with site and refrigeration contractors to complete required compliance audits for ammonia refrigeration systems. Develop and execute total process safety audits, assessments, and field verification activities; manage findings and recommendations; assess systemic issues; monitor corrective actions; verify closure; and escalate significant risks.
12. Training and Development: This position will be responsible for developing and delivering required PSM/RMP training covering applicable regulatory requirements, Stratas Foods standards, process hazards, hazard recognition, inspections, gap resolution, and total process safety management systems. The position will build process safety knowledge and competency among facility EHS personnel and other applicable employees.
13. Contractor Management: Establish and oversee PSM/RMP contractor safety requirements for contractors performing work on or near a covered process. Partner with facility personnel to ensure contractor qualification, hazard communication, training verification, safe work practices, performance evaluation, and required PSM documentation are completed and maintained.
14. Collaborate closely with onsite teams and participate in onsite meetings to drive departmental objectives.  

Job Description

Develop, implement, manage, and continuously improve Stratas Foods' total process safety Management Program for processes and equipment presenting significant chemical, pressure, thermal, mechanical, fire, explosion, or stored-energy hazards. Program scope includes PSM/RMP-covered processes as well as other total process safety critical systems, including ammonia and CO2 refrigeration systems, boilers, compressed air systems, nitrogen generation and distribution systems, caustic and other hazardous chemical processes, combustible dust hazards, steam and condensate systems, hot liquids, cooking oil systems, and other applicable process hazards. Establish risk-based corporate standards, procedures, and minimum requirements to prevent significant releases, fires, explosions, equipment failures, and other total process safety incidents. This position will report to the Environmental Manager.

The Sr. Process Safety Management Analyst position requires up to 25% travel (or one week a month) to the various facilities of responsibility. This position can be based in Decatur, IL or Memphis, TN.

Essential Duties & Responsibilities

1. PSM Program Development: Develop, implement, maintain, and continuously improve Stratas Foods' total process safety management systems covering regulated and non-regulated processes presenting significant chemical, pressure, thermal, fire, explosion, mechanical, or stored-energy hazards. Develop and monitor leading and lagging total process safety performance indicators to evaluate program effectiveness, identify systemic trends, prioritize risk reduction opportunities, and communicate total process safety performance to facility and executive leadership.
2. Compliance Metrics: Determine regulatory applicability and oversee compliance with applicable total process safety requirements, including OSHA PSM, EPA RMP, and other federal, state, local, and applicable code requirements. Serve as a company total process safety representative during applicable regulatory interactions.
3. Process Hazard Identification, Risk Assessment and Total Process Safety: Develop and oversee risk-based processes for identifying, evaluating, prioritizing, and controlling process hazards, including PHA and other appropriate hazard-assessment methodologies. Establish requirements for maintaining accurate total process safety and technical information for total process safety critical equipment and systems. Partner with Engineering, Operations, Maintenance, Refrigeration contractors, EHS, and facility leadership to identify and evaluate total process safety impacts associated with new or modified equipment, processes, chemicals, technology, procedures, and operating conditions. Lead the implementation and integration of new or revised total process safety programs, corporate standards, regulatory requirements, and risk-control initiatives across applicable facilities. 
4. Risk Assessment and Evaluation: Where applicable provide total process safety oversight for chemical, thermal, fire, and explosion hazards, including caustic and other hazardous chemicals, hot cooking oils and process liquids, steam and condensate systems, and combustible dust where applicable. Evaluate process hazards and support the development and implementation of appropriate engineering, administration, inspection, maintenance, and operational controls based on risk. 
5. Pressure Vessel Inspections and Asset Integrity: Work with Maintenance and Engineering to coordinate regularly recurring pressure vessel inspections and develop/oversee corporate mechanical integrity requirements for total process safety-critical equipment and systems. Ensure Recognized and Generally Accepted Good Engineering Practices (RAGAGEP), applicable codes, standards, manufacturer recommendations are implemented and followed.  
6. Critical Safety Device Management: Develop, implement, and maintain Stratas Foods' Critical Safety Device Program, including the identification and documentation of applicable critical safety devices. Partner with Maintenance and other applicable functions to establish requirements for inspection, testing, impairment management, deficiency resolution, and verification of critical engineered safeguards. 
7. Emergency Preparedness and Response: Provide oversight and technical guidance for emergency action and response planning involving applicable total process safety hazards, including regulated and non-regulated processes. Coordinate with facility leadership, EHS, emergency responders, and applicable local agencies to ensure emergency plans, notification systems, drills/exercises, equipment, and response capabilities remain appropriate for facility hazards. 
8. Regulatory Applicability / RMP Submittals: Evaluate facilities and process changes for applicability under OSHA PSM, EPA RMP, and other applicable total process safety requirements. Coordinate preparation, certification, updates, and submission of required Risk Management Plans and associated regulatory documentation. 
9. Policy Administration and Communication: This position shall initiate and lead monthly PSM committee meetings involving affected managers and team members including but not limited to the Plant Manager, refrigeration manager, maintenance manager, safety managers, refrigeration team members, and appropriate production management personnel. This position will also act as company liaison in dealing with federal agencies, such as EPA and OSHA, as they pertain to the PSM/RMP program.  Coordinates presentation of Company’s position to this agency with assistance of Health & Safety Manager and legal counsel. collect, maintain, and organize all information related to the 14 elements of the Stratas PSM and RMP Programs. Additionally, this position should support refrigeration management with budgeting related to PSM covered processes and support refrigeration management in the development and implementation of training related to PSM covered processes. Lead or support, as appropriate, investigations of total process safety incidents and near misses involving applicable processes. Facilitate or support root cause analyses, identify systemic and programmatic causes, develop corrective actions, communicate lessons learned across facilities, and evaluate trends to prevent recurrence.
10. Site EHS Functional Leadership and Coaching: Provide functional total process safety leadership, coaching, technical guidance, and ongoing support to facility EHS personnel. Conduct periodic individual check-ins to review total process safety performance, priorities, concerns, program implementation, corrective actions, and development needs.
11. Auditing, Assurance and Corrective Action Management: Work with site and refrigeration contractors to complete required compliance audits for ammonia refrigeration systems. Develop and execute total process safety audits, assessments, and field verification activities; manage findings and recommendations; assess systemic issues; monitor corrective actions; verify closure; and escalate significant risks.
12. Training and Development: This position will be responsible for developing and delivering required PSM/RMP training covering applicable regulatory requirements, Stratas Foods standards, process hazards, hazard recognition, inspections, gap resolution, and total process safety management systems. The position will build process safety knowledge and competency among facility EHS personnel and other applicable employees.
13. Contractor Management: Establish and oversee PSM/RMP contractor safety requirements for contractors performing work on or near a covered process. Partner with facility personnel to ensure contractor qualification, hazard communication, training verification, safe work practices, performance evaluation, and required PSM documentation are completed and maintained.
14. Collaborate closely with onsite teams and participate in onsite meetings to drive departmental objectives.  

The IT Security Governance Analyst supports the Client enterprise cybersecurity program by administering and improving governance, risk, compliance, privacy, and security assurance activities.

This is a remote role. However, Client has requested that candidates reside in Virginia or within a reasonable distance. They may have them report on site for meetings as needed.

All interviews are in-person with no exceptions.

The statements below describe the principal duties of the position and are not intended to be all-inclusive.

• Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, services, integrations, and technology initiatives.
• Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and other approved agency tools. Track remediation commitments, due dates, residual risk, and required executive decisions.
• Apply and interpret Commonwealth and agency requirements, including VITA SEC530, NIST guidance, CIS Controls, DoD STIGs, CJIS and VCIN requirements, and applicable HIPAA, PCI, FERPA, FTI, privacy, and contractual obligations.
• Partner with system owners and data owners to establish ownership, classify information, document security plans and controls, complete periodic reviews, and maintain evidence needed for authorization, audit, and ongoing compliance.
• Review vendor and third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, MOUs, MOAs, NDAs, and other interconnection documentation. Identify conditions, gaps, compensating controls, and escalation needs.
• Support interconnection and data-sharing governance by reviewing MOUs and related agreements for security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements.
• Coordinate audit, assessment, and oversight activities; collect and validate evidence; respond to inquiries; document findings; and manage corrective actions through closure with internal audit, VITA, and other authorized reviewers.
• Develop, maintain, and communicate security policies, standards, procedures, guidelines, templates, and governance processes. Recommend practical improvements that strengthen compliance and reduce risk.
• Support the agency security awareness and training program, including targeted compliance training, acknowledgements, tracking, reporting, and education for system owners, technical staff, and other stakeholders.
• Perform governance reviews for emerging technology and artificial intelligence initiatives. Evaluate business purpose, data sensitivity, privacy, security, human oversight, vendor assurances, risks, and required approvals; document outcomes and handoffs.
• Assist with security planning for continuity, incident response, disaster recovery, business continuity, audit logging, configuration and hardening, access reviews, vendor management, and other control areas.
• Prepare accurate executive, management, and Commonwealth reporting on governance workload, system inventory, risks, findings, remediation progress, compliance status, metrics, and program priorities.
• Provide clear security guidance to project teams, operational IT, procurement, business units, and vendors. Facilitate meetings, communicate requirements professionally, and escalate unresolved risk or noncompliance through established channels.
• Participate in incident and post-incident governance activities as assigned, including documentation review, control-gap identification, privacy or regulatory coordination, and corrective-action tracking.
• Perform other related duties and special projects in support of the IT Security Governance program.


Knowledge Skills and Abilities
• Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
• Knowledge of security frameworks and standards such as NIST 800-53, VITA SEC530, CIS Controls, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
• Ability to analyze technical and business information, identify risk, distinguish control gaps from acceptable residual risk, and recommend clear, defensible actions.
• Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence.
• Ability to manage multiple complex assignments, prioritize work under deadlines, and follow through on actions involving many stakeholders.
• Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical business partners.
• Ability to handle sensitive information with sound judgment, discretion, and a service-oriented approach.

Desired Qualifications
These qualifications would strengthen a candidate's application but would not be mandatory.
Experience and Skills

1. Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.
2. VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements.
3. Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.
4. Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.
5. Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
6. Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.
7. Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.
8. AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.
9. Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.

Skills Required Minimum Experience Candidate Experience Last Used experience in cybersecurity, information security, IT security governance, or risk management. Required 5     experience performing security risk assessments, compliance reviews, or GRC activities. Required 3     experience applying NIST security frameworks, including NIST SP 800-53. Required 4     experience conducting security control assessments and supporting IT audits. Required 3     experience maintaining risk registers, documenting findings, and tracking corrective actions. Required 3     Experience developing security documentation, policies, procedures, assessment reports, and executive summaries. Required 3     Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership. Required 3     Ability to manage multiple security assessments, compliance activities, and competing deadlines. Required 3       Questions Questions Answers Question 1 Commonwealth of Virginia security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment?   Question 2 What is your candidate's email address?   Question 3 what city and state is your candidate currently located?   Question 4 Does your candidate agree to interview in person?  

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

 

Job Title: IT Security Analyst 2

Location(s): Richmond, VA
(Remote)


Job Summary
The IT Security Governance Analyst supports the enterprise cybersecurity program by administering and improving governance, risk, compliance, privacy, and security assurance activities.

Work Arrangement

• Remote position.
• Candidates should reside in Virginia or within a reasonable distance to report onsite for meetings as needed.
• All interviews are in person, with no exceptions.

Responsibilities

• Conduct and coordinate security risk assessments, Business Impact Analyses (BIAs), data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, services, integrations, and technology initiatives.
• Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and other approved tools. Track remediation commitments, due dates, residual risk, and required executive decisions.
• Apply and interpret applicable security requirements, including VITA SEC530, NIST guidance, CIS Controls, DoD STIGs, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI, privacy, and contractual obligations.
• Partner with system and data owners to establish ownership, classify information, document security plans and controls, complete periodic reviews, and maintain evidence for authorization, audits, and ongoing compliance.
• Review vendor and third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, MOUs, MOAs, NDAs, and interconnection documentation. Identify gaps, conditions, compensating controls, and escalation requirements.
• Review interconnection and data-sharing agreements for security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements.
• Coordinate audits, assessments, and oversight activities; collect and validate evidence; respond to inquiries; document findings; and manage corrective actions through closure with internal audit teams and authorized reviewers.
• Develop, maintain, and communicate security policies, standards, procedures, guidelines, templates, and governance processes. Recommend improvements to strengthen compliance and reduce risk.
• Support security awareness and training programs, including targeted compliance training, acknowledgements, tracking, reporting, and education for system owners, technical staff, and other stakeholders.
• Conduct governance reviews for emerging technology and artificial intelligence initiatives. Evaluate business purpose, data sensitivity, privacy, security, human oversight, vendor assurances, risks, and required approvals. Document outcomes and handoffs.
• Assist with security planning for continuity, incident response, disaster recovery, business continuity, audit logging, configuration and hardening, access reviews, vendor management, and other control areas.
• Prepare executive, management, and Commonwealth reports covering governance workload, system inventory, risks, findings, remediation progress, compliance status, metrics, and program priorities.
• Provide security guidance to project teams, operational IT, procurement, business units, and vendors. Facilitate meetings, communicate requirements professionally, and escalate unresolved risks or noncompliance through established channels.
• Participate in incident and post-incident governance activities, including documentation reviews, control-gap identification, privacy or regulatory coordination, and corrective-action tracking.
• Perform other related duties and special projects in support of the IT Security Governance program.

Required Knowledge, Skills, and Abilities

• Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
• Knowledge of security frameworks and standards, including NIST SP 800-53, VITA SEC530, CIS Controls, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
• Ability to analyze technical and business information, identify risks, distinguish control gaps from acceptable residual risks, and recommend clear, defensible actions.
• Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence.
• Ability to manage multiple complex assignments, prioritize work under deadlines, and follow through on activities involving multiple stakeholders.
• Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical business partners.
• Ability to handle sensitive information with sound judgment, discretion, and a service-oriented approach.

Desired Qualifications

• The following qualifications are preferred but not mandatory.
• Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.
• VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements.
• Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.
• Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.
• Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
• Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security and privacy obligations.
• Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.
• AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.
• Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.

Skills:

  Skill Required / Desired Amount of Experience Expertise Rating Move experience in cybersecurity, information security, IT security governance, or risk management. Required 5 Years     experience performing security risk assessments, compliance reviews, or GRC activities. Required 3 Years     experience applying NIST security frameworks, including NIST SP 800-53. Required 4 Years     experience conducting security control assessments and supporting IT audits. Required 3 Years     experience maintaining risk registers, documenting findings, and tracking corrective actions. Required 3 Years     6.Experience developing security documentation, policies, procedures, assessment reports, and executive summaries. Required 5 Years     Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership. Required 3 Years     Ability to manage multiple security assessments, compliance activities, and competing deadlines. Required 3 Years    

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.

Seeking an IT Security Analyst 2 for a long-term remote contract role with the Commonwealth of Virginia in Richmond, VA. The statements below describe the principal duties of the position and are not intended to be all-inclusive.

" Conduct and coordinate security risk assessments, Business Impact Analyses, data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, services, integrations, and technology initiatives.
" Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in Archer GRC and other approved agency tools. Track remediation commitments, due dates, residual risk, and required executive decisions.
" Apply and interpret Commonwealth and agency requirements, including VITA SEC530, NIST guidance, CIS Controls, DoD STIGs, CJIS and VCIN requirements, and applicable HIPAA, PCI, FERPA, FTI, privacy, and contractual obligations.
" Partner with system owners and data owners to establish ownership, classify information, document security plans and controls, complete periodic reviews, and maintain evidence needed for authorization, audit, and ongoing compliance.
" Review vendor and third-party security documentation, including SOC reports, security questionnaires, architecture and data-flow information, contracts, MOUs, MOAs, NDAs, and other interconnection documentation. Identify conditions, gaps, compensating controls, and escalation needs.
" Support interconnection and data-sharing governance by reviewing MOUs and related agreements for security, privacy, least-privilege, data-handling, access-control, incident-notification, and annual-review requirements.
" Coordinate audit, assessment, and oversight activities; collect and validate evidence; respond to inquiries; document findings; and manage corrective actions through closure with internal audit, VITA, and other authorized reviewers.
" Develop, maintain, and communicate security policies, standards, procedures, guidelines, templates, and governance processes. Recommend practical improvements that strengthen compliance and reduce risk.
" Support the agency security awareness and training program, including targeted compliance training, acknowledgements, tracking, reporting, and education for system owners, technical staff, and other stakeholders.
" Perform governance reviews for emerging technology and artificial intelligence initiatives. Evaluate business purpose, data sensitivity, privacy, security, human oversight, vendor assurances, risks, and required approvals; document outcomes and handoffs.
" Assist with security planning for continuity, incident response, disaster recovery, business continuity, audit logging, configuration and hardening, access reviews, vendor management, and other control areas.
" Prepare accurate executive, management, and Commonwealth reporting on governance workload, system inventory, risks, findings, remediation progress, compliance status, metrics, and program priorities.
" Provide clear security guidance to project teams, operational IT, procurement, business units, and vendors. Facilitate meetings, communicate requirements professionally, and escalate unresolved risk or noncompliance through established channels.
" Participate in incident and post-incident governance activities as assigned, including documentation review, control-gap identification, privacy or regulatory coordination, and corrective-action tracking.
" Perform other related duties and special projects in support of the IT Security Governance program.

Knowledge Skills and Abilities
" Knowledge of cybersecurity governance, risk management, compliance, privacy, third-party risk, and audit practices.
" Knowledge of security frameworks and standards such as NIST 800-53, VITA SEC530, CIS Controls, CJIS and VCIN requirements, HIPAA, PCI, FERPA, FTI, and related Commonwealth requirements.
" Ability to analyze technical and business information, identify risk, distinguish control gaps from acceptable residual risk, and recommend clear, defensible actions.
" Ability to develop and maintain professional documentation, including assessment reports, risk registers, security plans, policies, procedures, executive briefings, and audit evidence.
" Ability to manage multiple complex assignments, prioritize work under deadlines, and follow through on actions involving many stakeholders.
" Ability to communicate effectively with executives, technical teams, vendors, auditors, and nontechnical business partners.
" Ability to handle sensitive information with sound judgment, discretion, and a service-oriented approach.

Desired Qualifications
These qualifications would strengthen a candidate's application but would not be mandatory.

Experience and Skills

1. Archer GRC: 3+ years of experience using Archer or comparable governance, risk, and compliance platforms.
2. VITA SEC530: 2+ years of experience applying Commonwealth of Virginia information security requirements.
3. Third-Party Risk Management: 3+ years reviewing vendor security documentation, SOC reports, and security questionnaires.
4. Business Impact Analysis: 3+ years conducting BIAs, data classification reviews, and security feasibility assessments.
5. Regulatory Compliance: 3+ years working with CJIS, VCIN, HIPAA, PCI DSS, FERPA, or FTI requirements.
6. Privacy and Data Sharing: 2+ years reviewing data-sharing agreements, MOUs, and security/privacy obligations.
7. Incident Response and Continuity Governance: 2+ years supporting incident response, disaster recovery, or business continuity compliance.
8. AI and Emerging Technology Governance: 1+ year assessing security, privacy, and compliance risks associated with emerging technologies.
9. Executive Reporting: 3+ years preparing security metrics, compliance reports, risk summaries, and management briefings.