Senior Analyst – Information Security & Governance

About the role

The Senior Analyst – Information Security & Governance will lead the organization’s security initiatives, design advanced security solutions, manage complex projects, and mentor junior staff. This role is critical for protecting all information assets and staying ahead of evolving cyber threats.

Key responsibilities

• Lead development and implementation of the information security strategy and roadmap aligned with business objectives.
• Perform in‑depth risk assessments and vulnerability analyses, and develop risk management frameworks.
• Oversee incident response processes, lead major investigations, and coordinate with external agencies.
• Design and implement advanced security architectures, ensuring security is embedded in IT system design.
• Provide guidance and mentorship to junior security staff.
• Ensure compliance with regulations and standards such as GDPR, ISO 27001, and NIST; lead security audits.
• Evaluate and manage security posture of third‑party vendors and partners.
• Lead threat‑intelligence efforts to anticipate emerging threats.
• Collaborate with the CISO and executive leaders to communicate risks and align initiatives with business goals.
• Drive continuous improvement through innovation, research, and adoption of new technologies.

Required profile

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• At least 5 years of professional experience in information security.
• One of the following certifications: CISSP, CISM, or CISA (additional certifications such as CRISC or CCSP are highly desirable).
• Excellent communication skills to convey complex security issues to non‑technical stakeholders.

Required skills

• Risk assessment and vulnerability analysis.
• Incident response and management.
• Security architecture design and implementation.