The Information Security Analyst is responsible for the design, implementation and monitoring of security solutions, including information security systems, services, information security policies, processes, and procedures.

The Information Security Analyst is responsible for the design, implementation and monitoring of security solutions, including information security systems, services, information security policies, processes, and procedures. This role is also responsible for ensuring security events are contained and remediated in a timely manner.

The Information Security Analyst will be also required to perform vulnerability assessments, IT security reviews, cyber/IT risk assessments and delivering cybersecurity awareness training.

Key Responsibilities:

• Collaborate with MSSP teams in monitoring computer networks and systems for security issues.
• Perform routine security investigations and respond to security threats as per the Incident Response Framework.
• Execute vulnerability management program and compile regular technical and management reports.
• Work with other Group and technology stakeholders to support the design and implementation of security systems that enable the business to operate effectively and securely.
• Participate in the implementation of new security solutions, policies, standards, baselines, guidelines, and procedures.
• Participate in design and execution of risk and vulnerability assessments.
• Recommend best practice cybersecurity solutions to technical and business requests.
• Support other teams in implementing Risk, Governance, Compliance controls.
• Assist with creating and updating security system documentation, security awareness training materials, policies and procedures.
• Document and maintain an ICT Risk Register and monitor implementation of mitigating controls.
• Proposes new standards, tools, policies, and procedures for Information Security management activities.
• Define, implement and maintain Key Risk Indicators for measuring compliance of Group policies, procedures, standards, security training programs and technical infrastructure against defined compliance baselines.
• Maintain an up-to-date understanding of emerging trends in information security risks.