InfoSec Risk & Issue Oversight Analyst (Hybrid)

Tandym Tech; Vienna (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Tandym Tech in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment. This role emphasizes independent review of security issues to ensure completeness and alignment with risk management requirements.

The ideal candidate has 5+ years in information security risk or GRC, experience with security controls across vulnerability management, IAM, network and cloud security, and

Qualifications

• 5+ years of experience in information security risk, cybersecurity GRC, IT risk, or a related function.
• Experience with security issue management, including risk assessment, root cause analysis, corrective action planning, and remediation validation
• Experience in a second line of defense oversight role or similar independent challenge function
• Strong understanding of the Three Lines of Defense model and the distinction between risks, issues, and events
• Working knowledge of security controls across vulnerability management, identity and access management, network security, cloud security, and data protection
• Strong analytical, documentation, and communication skills.

Responsibilities

• Perform independent review and challenge of security issues to ensure completeness, accuracy, and alignment with issue management requirements
• Evaluate issue details for appropriate criteria, condition, cause, consequence, and risk articulation
• Interpret information security standards and provide governance guidance regarding control applicability
• Review corrective action plans and validate remediation evidence and issue closure packages
• Identify emerging risks, recurring themes, and control weaknesses, and communicate findings to stakeholders and leadership

Skills

InfoSec risk

Security issue management

Remediation validation

Second line of defense

Three Lines of Defense

Security controls

GRC

Education

Bachelor’s degree in business or information systems

Job description

Tandym Tech in Virginia is seeking an Information Security Analyst to focus on second-line security oversight, issue management, and remediation validation within a governed risk environment. This role emphasizes independent review of security issues to ensure completeness and alignment with risk management requirements.

The ideal candidate has 5+ years in information security risk or GRC, experience with security controls across vulnerability management, IAM, network and cloud security, and