Technical Risk Analyst

Job Summary

To support the Security Second Line of Defense (2LOD) Issue Management function, the contract Technical Risk Analyst will provide independent oversight, evaluate issue quality, and ensure effective remediation of security issues, with opportunities for remote work or hybrid arrangements in Virginia and Pensacola, FL.

Key responsibilities

• Perform independent reviews and challenges of security issues to ensure compliance with issue management requirements
• Evaluate and interpret Information Security Standards while providing governance guidance on control applicability
• Identify emerging risks and review corrective action plans for adequacy and alignment with root causes

Required qualifications

• Experience in the credit union/financial services industry with a focus on regulatory frameworks and information security assessments
• Knowledge of NCUA, FFIEC, GLBA, and NIST Cyber Security Framework and 800 Series controls
• Demonstrated understanding of Security Governance, Risk, and Compliance (GRC) programs
• Desired bachelor's degree in business, information systems, or related field, or equivalent work/military experience
• Experience performing independent challenge and oversight functions