Information Security Analyst

A financial services organization in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment.

About the Opportunity: Schedule: Monday to Friday Hours: Standard business Setting: Hybrid (at least 3 days onsite; only the perfect candidates will be considered for Remote work), Perform independent review and challenge of security issues to ensure completeness, accuracy, and alignment with issue management requirements Evaluate issue details for appropriate criteria, condition, cause, consequence, and risk articulation Interpret information security standards and provide governance guidance regarding control applicability Review corrective action plans and validate remediation evidence and issue closure packages Identify emerging risks, recurring themes, and control weaknesses, and communicate findings to stakeholders and leadership

5+ years of experience in information security risk, cybersecurity GRC, IT risk, or a related function Experience with security issue management, including risk assessment, root cause analysis, corrective action planning, and remediation validation Experience in a second line of defense oversight role or similar independent challenge function Strong understanding of the Three Lines of Defense model and the distinction between risks, issues, and events Working knowledge of security controls across vulnerability management, identity and access management, network security, cloud security, and data protection Strong analytical, documentation, and communication skills. Desired Skills:

Bachelor’s degree in business, information systems, or a related field, or equivalent work or military experience Experience in financial services or credit union environments Familiarity with NIST, FFIEC, NCUA, and GLBA frameworks Experience with security governance, risk, and compliance programs