Information Security Risk & Compliance Analyst

Job Description

We're Hiring: Information Security Risk & Compliance Analyst

\n

\n

PTSOL is looking for an experienced Information Security Risk & Compliance Analyst for a 6+ month contract opportunity with the possibility of extension.

\n

\n

Locations: Vienna, VA | Winchester, VA | Pensacola, FL

\n

Work Model: Hybrid – The position is open in all three locations, with candidates working in a hybrid setting from any one location.

\n

Contract Duration: 6+ months, with the possibility of extension.

\n

\n

Key Responsibilities:

\n

\n
• Conduct independent reviews and provide effective challenge of security issues to ensure completeness, accuracy, and compliance with issue management requirements.
\n
• Evaluate security issues, including criteria, condition, cause, consequence, and risk articulation.
\n
• Review corrective action plans for adequacy, sustainability, and root cause alignment.
\n
• Validate remediation evidence and issue closure documentation.
\n
• Interpret Information Security Standards and provide guidance on security control applicability.
\n
• Identify emerging risks, recurring issues, and systemic control weaknesses requiring leadership attention.
\n
• Collaborate with Information Security, Technology, Enterprise Risk, and business stakeholders to support effective risk management and issue resolution.
\n

\n

\n

Required Qualifications:

\n

\n
• Experience in the credit union or financial services industry, particularly in regulatory frameworks, information security assessments, and remediation activities.
\n
• Knowledge of Security Governance, Risk, and Compliance (GRC) programs and the Three Lines Model, particularly Second Line of Defense responsibilities.
\n
• Familiarity with NCUA, FFIEC, GLBA, and NIST frameworks, including the Cybersecurity Framework and 800 Series controls.
\n
• Working knowledge of Vulnerability Management, Identity and Access Management, Network Security, Cloud Security, and Data Protection controls.
\n
• Strong analytical, root cause analysis, risk assessment, planning, organizational, communication, and technical writing skills.
\n
• Bachelor's degree in Business, Information Systems, or a related field, or equivalent work or military experience preferred.
\n

\n

\n

Interested in this opportunity? Send your updated resume via LinkedIn direct message or reach out to learn more.