Information Security Risk & Compliance Analyst

Job Description

🚀 We're Hiring: Information Security Risk & Compliance Analyst

\n

\n

PTSOL is looking for an experienced Information Security Risk & Compliance Analyst for a 6+ month contract opportunity with the possibility of extension.

\n

\n

📍 Locations: Vienna, VA | Winchester, VA | Pensacola, FL

\n

🏢 Work Model: Hybrid – The position is open in all three locations, with candidates working in a hybrid setting from any one location.

\n

📅 Contract Duration: 6+ months, with the possibility of extension.

\n

\n

Key Responsibilities:

\n

\n
• Conduct independent reviews and provide effective challenge of security issues to ensure completeness, accuracy, and compliance with issue management requirements.

\n

• Evaluate security issues, including criteria, condition, cause, consequence, and risk articulation.

\n

• Review corrective action plans for adequacy, sustainability, and root cause alignment.

\n

• Validate remediation evidence and issue closure documentation.

\n

• Interpret Information Security Standards and provide guidance on security control applicability.

\n

• Identify emerging risks, recurring issues, and systemic control weaknesses requiring leadership attention.

\n

• Collaborate with Information Security, Technology, Enterprise Risk, and business stakeholders to support effective risk management and issue resolution.

\n

\n

\n

Required Qualifications:

\n

\n
• Experience in the credit union or financial services industry, particularly in regulatory frameworks, information security assessments, and remediation activities.

\n

• Knowledge of Security Governance, Risk, and Compliance (GRC) programs and the Three Lines Model, particularly Second Line of Defense responsibilities.

\n

• Familiarity with NCUA, FFIEC, GLBA, and NIST frameworks, including the Cybersecurity Framework and 800 Series controls.

\n

• Working knowledge of Vulnerability Management, Identity and Access Management, Network Security, Cloud Security, and Data Protection controls.

\n

• Strong analytical, root cause analysis, risk assessment, planning, organizational, communication, and technical writing skills.

\n

• Bachelor's degree in Business, Information Systems, or a related field, or equivalent work or military experience preferred.

\n

\n

\n

📩 Interested in this opportunity? Send your updated resume via LinkedIn direct message or reach out to learn more.