Information Security Analyst

Key Responsibilities

• Monitor systems, network and applications for security risks.
• Work with information security team to plan and enforce security requirements
• Report to management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.
• Participate, Investigate, support and document cybersecurity incidents and breaches.
• Administer security tools to protect systems, networks and applications. This includes firewalls, Intrusion detections and prevention systems, security gateways etc.
• Assess security requirements and controls during the application development and acquisition process as defined in company’s security policies and standards.
• Perform vulnerability assessments and tests to uncover flaws and help technical teams to remediate identified vulnerabilities to maintain high security standards.
• Provide support to ongoing external and internal audits and audit remediation on information technology, including generating technical recommendations
• Develop and maintain security processes and procedures, and support service-level agreements (SLAs) to ensure that security controls are managed and maintained
  Create, manage and maintain user security awareness program
• Participate in user access provisioning and de provisioning activities to verify security controls are adhered
• Conduct security research in keeping abreast of latest security threat landscape and stay abreast with the current information technology trends
• Develop positive working relationships with various teams involved in security and privacy matters

Key Qualifications

• 5 years of related work experience
• Strong hands-on experience with tools such as: IDS/IPS, Metasploit, Nexpose, Nmap, Nessus, Wireshark, L0phtCrack, John the Ripper etc.
• In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls
• Experience with common information security management frameworks, such as International Organization for Standardization (ISO) 27001, NIST Cybersecurity Framework. PCI DSS etc.
• Experience with penetration tests and techniques is preferred
• Proficiency in performing risk, business impact, control and vulnerability assessments
• Experience in developing, documenting and maintaining security policies, processes, procedures and standards
• Proficiency in network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts
• Audit, compliance or governance experience is preferred
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Strong written and verbal communication skills.
• University degree required.
• Professional certification such as CISSP, CISA.

#LI-Hybrid

Salary Range:

The actual base salary for this position will depend on several factors, including job-related skills, experience, and education. In addition to base pay, eligible employees may participate in a discretionary variable incentive plan, results are subject to both individual and company performance.

Please note that this posting is intended to fill an existing vacancy; however, there may be instances where more than one vacancy is available for the same role.