Information Security Analyst

Information Security Analyst

The Information Security Analyst is responsible for monitoring the company's systems and networks for security events, vulnerabilities, and incidents using various systems, services, and tools. This role includes conducting security risk assessments of internal systems and third-party services, analyzing security threats, and providing expert advice on risk mitigation. The analyst will also serve as a point of contact for security event reporting and champion information security awareness within the company.

* Security Monitoring: Analyse and respond to security threats from various security platforms and technologies. * Threat Assessment: Conduct research and evaluate cyber intelligence to develop in-depth assessments of threats to the organisation's networks, systems, users, and data. * Incident Reporting: Serve as a liaison and a point of contact for information security event reporting. * Technical Assessments: Create technical assessments and cyber threat profiles based on innovative collection and research. * Procedural Development: Develop and maintain analytical procedures to meet changing requirements and enable more strategic detections. * Trend Awareness: Stay abreast of innovative business and technology trends in IT security, risk, and controls. * Risk Management: Ensure effective execution of the risk management framework by managing relationships with key stakeholders. * Regulatory Compliance: Identify regulatory risks and ensure they are appropriately mitigated. * Security Advocacy: Champion information security within the company, providing training and increasing awareness. * Risk Reporting: Develop, track, and report on Key Risk Indicators (KRIs) for information security. * Control Testing: Perform process-level walkthroughs, control testing, and assess IT risks and controls. * Communication: Effectively communicate key risks, findings, and recommendations for improvement with stakeholders. * Ad Hoc Duties: Perform any other ad hoc duties as assigned.

* Communication Skills: Fluent in English with strong oral and written communication skills. * Team Interaction: Comfortable conversing with teams of varied backgrounds and purposes. * Guidance Reception: Receptive to management guidance and able to effectively communicate results. * Organisation: Highly organised with an ability to prioritise and multi-task. * Problem-Solving: Excellent problem-solving skills, productive both independently and as part of a team. * Attention to Detail: Detail-oriented with the ability to juggle multiple issues efficiently and effectively. * Analytical Thinking: Able to think outside the box to analyse security issues. * Educational Background: Minimum of a bachelor's degree in Computer Science, Cyber Security, Information Technology, or a similar field. * Experience: Minimum of 4 years experience in IT, with at least 2 years in Information Security. * Technical Expertise: Experience with Linux, Windows, and Network Operating Systems, and practical expertise with EDR, SIEM, and SOAR solutions. * Policy Development: Experience developing security policies, standards, and guidelines. * Security Frameworks: Knowledge of security control frameworks such as CIS, OWASP, COBIT. * Programming Skills: Proficient in programming and scripting (Python, Bash, PowerShell). * Standard Knowledge: Good understanding of ISO27001, information risk management, and GRC practices. * Certifications: Desirable certifications include CISSP, CISM, CISA, CRISC, ISO27001 Lead Implementer, ISO27001 Lead Auditor. * Financial Sector Experience: Previous experience in a financial services institution is considered an asset.