> Markdown version of [/jobs/ext/3841462-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/3841462-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Tandym Tech
- **Location:** Vienna, VA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Information Systems, Identity and Access Management, Network Security, Software Vulnerability Management
- **Published:** October 20, 2026
- **Apply:** https://www.adzuna.com/details/5934834797

## About the Role

5+ years of experience in information security risk, cybersecurity GRC, IT risk, or a related function
Experience with security issue management, including risk assessment, root cause analysis, corrective action planning, and remediation validation
Experience in a second line of defense oversight role or similar independent challenge function
Strong understanding of the Three Lines of Defense model and the distinction between risks, issues, and events
Working knowledge of security controls across vulnerability management, identity and access management, network security, cloud security, and data protection
Strong analytical, documentation, and communication skills.
Desired Skills:

Bachelor's degree in business, information systems, or a related field, or equivalent work or military experience
Experience in financial services or credit union environments
Familiarity with NIST, FFIEC, NCUA, and GLBA frameworks
Experience with security governance, risk, and compliance programs

## Description

A financial services organization in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment.

About the Opportunity:
Schedule: Monday to Friday
Hours: Standard business
Setting: Hybrid (at least 3 days onsite; only the perfect candidates will be considered for Remote work), Perform independent review and challenge of security issues to ensure completeness, accuracy, and alignment with issue management requirements
Evaluate issue details for appropriate criteria, condition, cause, consequence, and risk articulation
Interpret information security standards and provide governance guidance regarding control applicability
Review corrective action plans and validate remediation evidence and issue closure packages
Identify emerging risks, recurring themes, and control weaknesses, and communicate findings to stakeholders and leadership