Security Analyst

Overview The Security Analyst Experienced will be responsible for supporting the organization's Information Security and Information Security Management System (ISMS). The role combines hands-on information security activities with internal ISMS auditing, risk management, compliance, and continual improvement in alignment with ISO/IEC 27001 requirements.

Responsibilities Conduct internal ISMS and ISO 27001 audits and assess the effectiveness of security controls. Review information security policies, procedures, standards, and control evidence. Identify and document security risks, control gaps, observations, and non-conformities. Perform information security risk assessments and support maintenance of the ISMS risk register. Track audit findings and corrective actions and validate remediation evidence through closure. Support ISO 27001 certification, surveillance audits, and management reviews. Monitor security systems, networks, endpoints, and infrastructure for threats and suspicious activity. Support security incident identification, investigation, response, and documentation. Coordinate vulnerability management, patch management, and remediation activities. Support access management, privileged access, and periodic user access reviews. Configure, troubleshoot, and maintain security tools and infrastructure, including firewalls, endpoint security, authentication, and monitoring solutions. Support security logging, alerting, and investigation activities. Assist with data protection, information classification, and secure handling of sensitive information. Participate in third-party/vendor security assessments where required. Support business continuity and disaster recovery security requirements. Identify security requirements and recommend solutions to improve the organization's security posture. Develop and implement security improvements and automation for repeatable security tasks. Support security awareness and training initiatives. Prepare security, audit, risk, and compliance reports for management. Ensure compliance with organizational security policies and applicable information security standards. Contribute to the continual improvement of the organization's ISMS and overall security posture.

Qualifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred. Minimum 2 years of experience in Information Security, ISMS, IT Audit, IT Compliance, GRC, or a related security role.