Security Analyst (ISO27001, Cloud & Data Governance)

About the role

The Security Analyst will ensure our information security program aligns with ISO27001 standards, supports cloud environments, and protects data across the organization. You will work closely with IT, business units, and auditors to maintain a robust security posture.

Key responsibilities

• Monitor and maintain ISO27001 compliance and related governance frameworks.
• Conduct risk and gap assessments to identify security weaknesses.
• Develop, maintain, and review security policies, standards, procedures, and guidelines.
• Manage and improve security technologies, creating use cases and configuring tools against emerging threats.
• Develop and enforce data governance and data security controls.
• Design and deliver security awareness training programs.
• Coordinate internal and external audits, collect evidence, and track remediation.
• Serve as liaison between security, IT, business units, and auditors.
• Maintain documentation repositories and the information security risk register.

Required profile

• Bachelor’s degree in Computer Science, IT, or Cybersecurity.
• Professional certifications: CISSP, CISA and/or CEH.
• Strong analytical, documentation, and communication abilities.
• Knowledge of ISO27001 and NIST control frameworks.

Required skills

• Networking concepts and network infrastructure.
• Cloud security and data governance (Azure).
• Penetration testing and vulnerability assessment.
• Antivirus, firewall, IDS/IPS technologies.
• ISO27001 implementation.
• NIST controls implementation.