A financial services organization in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment.
About the Opportunity:
Schedule: Monday to Friday
Hours: Standard business
Setting: Hybrid (at least 3 days onsite; only the perfect candidates will be considered for Remote work)
Responsibilities:
Perform independent review and challenge of security issues to ensure completeness, accuracy, and alignment with issue management requirements
Evaluate issue details for appropriate criteria, condition, cause, consequence, and risk articulation
Interpret information security standards and provide governance guidance regarding control applicability
Review corrective action plans and validate remediation evidence and issue closure packages
Identify emerging risks, recurring themes, and control weaknesses, and communicate findings to stakeholders and leadership
Qualifications:
5+ years of experience in information security risk, cybersecurity GRC, IT risk, or a related function
Experience with security issue management, including risk assessment, root cause analysis, corrective action planning, and remediation validation
Experience in a second line of defense oversight role or similar independent challenge function
Strong understanding of the Three Lines of Defense model and the distinction between risks, issues, and events
Working knowledge of security controls across vulnerability management, identity and access management, network security, cloud security, and data protection
Strong analytical, documentation, and communication skills.
Desired Skills:
Experience in financial services or credit union environments
Familiarity with NIST, FFIEC, NCUA, and GLBA frameworks
Experience with security governance, risk, and compliance programs
