If you have experience with Microsoft Purview, data classification, and DLP frameworks, we’d love to connect. Configure and maintain Microsoft Purview features including data classification, sensitive data types, sensitivity labels, and Data Loss Prev...

• Responsible for managing and maintaining all documentation and related tasks to attain and maintain information security standards. • Assists in the development of security architecture with the management of security architecture, frameworks, policies, principles, and standards. • Advises on the security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network appliances, and host-based security systems. • Participates in incident responses, assessments, audits, and compliance reviews. • Evaluate current information security policies, standards, and procedures and make necessary changes to ensure compliance with information security standards and frameworks. • Work with a cross-functional team of local and remote subject matter experts (product, service, QA, support, system, and sales engineers, and product managers) to plan, write, and edit technical information while meeting compliance requirements. • Manages responses to risk security requests and identifies risk within the business relationship. • Manages content creation, information architecture, and document control processes to ensure compliance with established quality and style standards. • Create and coordinate the creation of technical written content and diagrams for contract deliverables and compliance documents. • Supports current system analysis to identify and propose required technical solutions for the successful implementation of information security controls. • Collaborates with and consults SMEs to create content and validate content for technical documentation in support of auditing initiatives. • Ensures compliance with framework requirements to obtain/retain certification.

Role Description GovCIO is currently hiring for Senior Information Security Analyst with an active Secret clearance to plan and coordinate IT security programs and policies. This position will be located in Arlington, VA and will be a fully remote position. - Plan and coordinate IT security programs and policies. - Manage and control changes to systems, assessing the security impact of related changes. - Provide security testing for code changes/development, and prepare/review documentation to include: - System Security Plans (SSPs) - Risk Assessment Reports - Certification and Accreditation (C&A) packages - System Requirements Traceability Matrices (SRTMs) - Provide Subject Matter Expertise (SME) for disaster recovery (DR) contingency plans (ISCP). - Write expert IT Security evaluations of audits findings. - Assist with creating, updating and closing all Plans of Action and Milestones (POAMs). - Develop security guidelines and processes for new and existing networks as needed. - Provide IT Security analysis by reviewing all System Change Requests (SCR). - Review vulnerability scan reports and work with technical SMEs to develop and track plans to remediate findings. Qualifications - Bachelor's with 5 - 8 years system security (or commensurate experience) Requirements - Clearance Required: Active Secret with the ability to obtain and hold DEA suitability Benefits - Posted Salary Range: USD $115,000.00 - USD $115,000.00 /Yr.

Title: Information Governance Analyst Location: Arlington, Virginia, 22932, United States Department: Information Technology Job Category: Information Technology Requisition Number: INFOR001511 Job Description: Information Governance Analyst VA Office Role Description Summary: The Enterprise Content Management (ECM) Information Governance Analyst supports the ECM Information Governance Lead in managing the ECM system and ensuring regulatory compliance and proper records governance. This role assists with content stewardship, maintaining high-quality metadata and aligning the ECM platform with business processes. The Analyst will have exposure to information governance frameworks, records management policies, and business process enablement, while developing foundational skills in ECM operations and compliance. Role Responsibilities: Information Governance Support - Assist in maintaining ECM governance documentation, policies, and procedures - Help monitor metadata quality and document classification, escalating issues to the Lead - Support alignment with regulatory requirements (FFIEC, state/federal laws, privacy, legal hold) under Lead’s guidance - Collaborate with business units to validate metadata and template usage Business Process Enablement - Support onboarding of new business processes, repositories, and workflows into the ECM platform - Help ensure standardized use of templates, metadata, and naming conventions - Assist in translating business requirements into ECM documentation and specifications Risk, Audit & Regulatory Support - Assist with audit, exam, and risk assessment activities related to ECM usage - Help track and document governance findings, issues, and remediation actions - Support validation of retention schedules, privacy requirements, and access models Training & Adoption - Assist in delivering training sessions on ECM use and governance expectations - Guide users to documentation and training to promote self-serve capabilities Metrics & Value Management - Help collect data for ECM governance KPIs, including metadata compliance and adoption rates Minimum Qualifications: - 2+ years of experience in information governance, records management, data stewardship, or business analysis. - Experience using or managing ECM platforms (e.g., Laserfiche) and Microsoft Office applications. - Understanding of information lifecycle, metadata, and records management concepts. - Strong attention to detail, willingness to learn, and ability to follow established procedures. - Good communication and documentation skills. - Ability to work collaboratively and take direction from senior team members. Education: - Bachelor’s Degree in the field of business, information sciences, information systems, or comparable field of study and/or related experience is required. Work Environment: Hybrid – Employees will work from both remote and onsite locations. Employees must live within a reasonable commuting distance of the office and are required to be onsite at least two (2) days per week, specifically on Tuesdays and Wednesdays. Certain positions or business needs may require additional in-office days.