Information Security Analyst

A financial services organization in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment.

About the Opportunity:

• 
  

  Schedule: Monday to Friday

  
  


• 
  

  Hours: Standard business

  
  


• 
  

  Setting: Hybrid (at least 3 days onsite; only the perfect candidates will be considered for Remote work)

  
  

Responsibilities:

• 
  

  Perform independent review and challenge of security issues to ensure completeness, accuracy, and alignment with issue management requirements

  
  


• 
  

  Evaluate issue details for appropriate criteria, condition, cause, consequence, and risk articulation

  
  


• 
  

  Interpret information security standards and provide governance guidance regarding control applicability

  
  


• 
  

  Review corrective action plans and validate remediation evidence and issue closure packages

  
  


• 
  

  Identify emerging risks, recurring themes, and control weaknesses, and communicate findings to stakeholders and leadership

  
  

Qualifications:

• 
  

  5+ years of experience in information security risk, cybersecurity GRC, IT risk, or a related function

  
  


• 
  

  Experience with security issue management, including risk assessment, root cause analysis, corrective action planning, and remediation validation

  
  


• 
  

  Experience in a second line of defense oversight role or similar independent challenge function

  
  


• 
  

  Strong understanding of the Three Lines of Defense model and the distinction between risks, issues, and events

  
  


• 
  

  Working knowledge of security controls across vulnerability management, identity and access management, network security, cloud security, and data protection

  
  


• 
  

  Strong analytical, documentation, and communication skills.

  
  

Desired Skills:

• 
  
  Bachelor's degree in business, information systems, or a related field, or equivalent work or military experience
  
  


• 
  

  Experience in financial services or credit union environments

  
  


• 
  

  Familiarity with NIST, FFIEC, NCUA, and GLBA frameworks

  
  


• 
  

  Experience with security governance, risk, and compliance programs