Security Analyst

About the role

The Security Analyst will lead the implementation and continuous improvement of information security controls across the organization. You will work closely with IT, business units and auditors to ensure compliance with ISO27001, NIST and other regulatory frameworks.

Key responsibilities

• Monitor and maintain ISO27001 adherence, performing regular gap and risk assessments.
• Develop, maintain and review security policies, standards, procedures and guidelines aligned with business objectives.
• Configure, tune and create use cases for security technologies, adapting them to emerging threats.
• Design and enforce data governance and data security measures.
• Plan and deliver security awareness training programs for staff.
• Coordinate internal and external audits, collect evidence, conduct walkthroughs and track remediation.
• Act as liaison between security, IT, business units and auditors to ensure consistent understanding of requirements.
• Maintain the information security risk register, prioritising and tracking risks.

Required profile

• Bachelor’s degree in Computer Science, Information Technology or Cybersecurity.
• Professional certifications: CISSP, CISA and/or CEH.
• Solid technical knowledge of networking concepts, network infrastructure and cloud security (Azure).
• Experience with data governance, penetration testing and vulnerability assessments.
• Familiarity with antivirus, firewall, IDS/IPS technologies and audit processes.
• Strong analytical, documentation and communication skills.

Required skills

• ISO27001
• NIST controls
• CISSP, CISA, CEH certifications
• Networking concepts and infrastructure
• Azure cloud security
• Data governance and data security
• Penetration testing and vulnerability assessment
• Antivirus, firewall, IDS/IPS
• Risk register management
• Audit coordination