Information Security Analyst

Tandym Tech; Vienna (VA); Híbrido; USD 90.000 - 120.000; Jornada completa

Descripción de la vacante

Tandym Tech in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment. This role emphasizes independent review of security issues to ensure completeness and alignment with risk management requirements.

The ideal candidate has 5+ years in information security risk or GRC, experience with security controls across vulnerability management, IAM, network and cloud security, and

Formación

• 5+ years of experience in information security risk, cybersecurity GRC, IT risk, or a related function.
• Experience with security issue management, including risk assessment, root cause analysis, corrective action planning, and remediation validation
• Experience in a second line of defense oversight role or similar independent challenge function
• Strong understanding of the Three Lines of Defense model and the distinction between risks, issues, and events
• Working knowledge of security controls across vulnerability management, identity and access management, network security, cloud security, and data protection
• Strong analytical, documentation, and communication skills.

Responsabilidades

• Perform independent review and challenge of security issues to ensure completeness, accuracy, and alignment with issue management requirements
• Evaluate issue details for appropriate criteria, condition, cause, consequence, and risk articulation
• Interpret information security standards and provide governance guidance regarding control applicability
• Review corrective action plans and validate remediation evidence and issue closure packages
• Identify emerging risks, recurring themes, and control weaknesses, and communicate findings to stakeholders and leadership

Conocimientos

InfoSec risk

Security issue management

Remediation validation

Second line of defense

Three Lines of Defense

Security controls

GRC

Educación

Bachelor’s degree in business or information systems

Descripción del empleo

A financial services organization in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment.

About the Opportunity

Schedule

Monday to Friday

Hours

Standard business

Setting

Hybrid (at least 3 days onsite; only the perfect candidates will be considered for Remote work)

Responsibilities

Perform independent review and challenge of security issues to ensure completeness, accuracy, and alignment with issue management requirements

Evaluate issue details for appropriate criteria, condition, cause, consequence, and risk articulation

Interpret information security standards and provide governance guidance regarding control applicability

Review corrective action plans and validate remediation evidence and issue closure packages

Identify emerging risks, recurring themes, and control weaknesses, and communicate findings to stakeholders and leadership

Qualifications

5+ years of experience in information security risk, cybersecurity GRC, IT risk, or a related function

Experience with security issue management, including risk assessment, root cause analysis, corrective action planning, and remediation validation

Experience in a second line of defense oversight role or similar independent challenge function

Strong understanding of the Three Lines of Defense model and the distinction between risks, issues, and events

Working knowledge of security controls across vulnerability management, identity and access management, network security, cloud security, and data protection

Strong analytical, documentation, and communication skills.

Desired Skills

Bachelor’s degree in business, information systems, or a related field, or equivalent work or military experience

Experience in financial services or credit union environments

Familiarity with NIST, FFIEC, NCUA, and GLBA frameworks

Experience with security governance, risk, and compliance programs