Information Security Analyst

Key Responsibilities

• Security Monitoring: Analyse and respond to security threats from various security platforms and technologies.
• Threat Assessment: Conduct research and evaluate cyber intelligence to develop in-depth assessments of threats to the organisation's networks, systems, users, and data.
• Incident Reporting: Serve as a liaison and a point of contact for information security event reporting.
• Technical Assessments: Create technical assessments and cyber threat profiles based on innovative collection and research.
• Procedural Development: Develop and maintain analytical procedures to meet changing requirements and enable more strategic detections.
• Trend Awareness: Stay abreast of innovative business and technology trends in IT security, risk, and controls.
• Risk Management: Ensure effective execution of the risk management framework by managing relationships with key stakeholders.
• Regulatory Compliance: Identify regulatory risks and ensure they are appropriately mitigated.
• Security Advocacy: Champion information security within the company, providing training and increasing awareness.
• Risk Reporting: Develop, track, and report on Key Risk Indicators (KRIs) for information security.
• Control Testing: Perform process-level walkthroughs, control testing, and assess IT risks and controls.
• Communication: Effectively communicate key risks, findings, and recommendations for improvement with stakeholders.
• Ad Hoc Duties: Perform any other ad hoc duties as assigned.

Qualifications, Skills and Attributes

• Communication Skills: Fluent in English with strong oral and written communication skills.
• Team Interaction: Comfortable conversing with teams of varied backgrounds and purposes.
• Guidance Reception: Receptive to management guidance and able to effectively communicate results.
• Organisation: Highly organised with an ability to prioritise and multi-task.
• Problem-Solving: Excellent problem-solving skills, productive both independently and as part of a team.
• Attention to Detail: Detail-oriented with the ability to juggle multiple issues efficiently and effectively.
• Analytical Thinking: Able to think outside the box to analyse security issues.
• Educational Background: Minimum of a bachelor's degree in Computer Science, Cyber Security, Information Technology, or a similar field.
• Experience: Minimum of 4 years experience in IT, with at least 2 years in Information Security.
• Technical Expertise: Experience with Linux, Windows, and Network Operating Systems, and practical expertise with EDR, SIEM, and SOAR solutions.
• Policy Development: Experience developing security policies, standards, and guidelines.
• Security Frameworks: Knowledge of security control frameworks such as CIS, OWASP, COBIT.
• Programming Skills: Proficient in programming and scripting (Python, Bash, PowerShell).
• Standard Knowledge: Good understanding of ISO27001, information risk management, and GRC practices.
• Certifications: Desirable certifications include CISSP, CISM, CISA, CRISC, ISO27001 Lead Implementer, ISO27001 Lead Auditor.
• Financial Sector Experience: Previous experience in a financial services institution is considered an asset.

What's on Offer

• Personal Development: Ongoing personal development opportunities.
• Preferential Rates: Preferential interest rates on home loans, personal loans, and home value loans.
• Academic Support: Comprehensive support for academic advancement with fully subsidized staff study loans.
• Health Insurance: Private clinic health insurance coverage, extendable to dependents.
• Life Insurance: Life insurance and personal accident cover.
• Performance Appraisals: Annual performance appraisals and salary reviews.
• Wellness Allowance: Receive an annual wellness allowance.
• Health Screenings: Complimentary health screenings.
• Flexible Work: Flexible work arrangements where the role permits.
• Corporate Discounts: Various corporate discounts.