Information Security Analyst I or II

Virginia Information Technologies Agency • Chesterfield, VA

7d • $70,000 - $98,000

About The Position

Commonwealth Savers is seeking an Information Security Analyst I or II to join its Information Security Operations & Governance Team. The analyst will help protect agency information, strengthen security controls, support risk management, and promote cybersecurity awareness. Candidates will be considered at the Analyst I or Analyst II level based on their qualifications and experience.

Commonwealth Savers is an independent state agency that provides savings programs supporting education, independence, and long-term security. The agency describes its mission as expanding opportunity, improving financial well-being, and making a difference to individuals and communities.

Requirements

• Degree, technical certification, or equivalent experience in Cybersecurity, Information Technology, Computer Science, or a related field.
• Analyst I: At least 1 year of information technology experience with exposure to and familiarity with security operations and various security solutions.
• Analyst II: At least 3 years of experience in cybersecurity, risk management, or security operations.
• Security certifications such as Security+, CySA+, CC, or CISSP, or the ability to obtain a required certification within two years of hire.
• Strong analytical, problem-solving, communication, and collaboration skills.
• Knowledge of modern cybersecurity technologies, best practices, and emerging threats, including AI-related security considerations.

Responsibilities

• Monitor and respond to security risks, vulnerabilities, and incidents.
• Support and administer security technologies, including vulnerability management, endpoint detection and response (EDR), data loss prevention (DLP), and SIEM platforms.
• Review identity and access management controls and ensure compliance with security standards and regulations.
• Conduct vendor security reviews, risk assessments, and data classification activities.
• Assist with security policies, awareness training, disaster recovery planning, and governance initiatives.
• Partner with IT teams and business stakeholders to strengthen the organization's security posture.
• Research emerging threats and recommend security improvements.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed