Information Security Analyst

• Participate in delivery of the Information Security Vulnerability Management capability and related services within Digital Security Threat Management
• Manage internal and external vulnerability scanning processes
• Track and report identified vulnerabilities
• Monitor vulnerabilities and perform classification and investigation follow-up
• Investigate and report information security vulnerabilities across infrastructure and application environments
• Participate in the Information Security Program, including Enterprise Vulnerability Management, Risk Reporting, and security program initiatives
• Research vulnerabilities and threats
• Write technical and non-technical reports for management
• Identify opportunities to automate or enhance Vulnerability Management processes in alignment with the Digital Enterprise model

• University degree or Certificate in Information Security or Computer Technology is an advantage
• Intermediate IT/Information Security experience in vulnerability management or core security technologies
• Intermediate Internet, networking, and computer knowledge, including software and hardware
• Knowledge of Information Security principles, protocols, practices, and industry standards
• Understanding of existing and emerging Information Security technologies
• Good generalist technology knowledge, especially IT architecture
• Experience with Service Now modules and scanning tools
• Proficient knowledge of MS Office, including Word, PowerPoint, and Excel
• Professional designation relating to Information Security, such as Security+, CISSP, CISM, or CISA, is an advantage but not mandatory
• Previous hands-on security technology experience
• Detail-oriented with organizational and analytical skills
• Excellent communication and collaboration skills

Demonstrates expertise in Information Security Vulnerability Management, including vulnerability scanning, risk reporting, and the ability to investigate and report on security vulnerabilities across various environments. Proficient in utilizing tools like Service Now and MS Office to enhance security processes and reporting.

• Vulnerability Management
• Information Security Principles
• Service Now Modules
• Risk Reporting
• Security Certifications

• Vulnerability Scanning
• Information Security
• IT Architecture
• Network Knowledge
• Security Technologies
• Analytical Skills
• Technical Reporting
• Automation of Processes
• Risk Assessment
• Threat Research

• Detail-Oriented
• Organizational Skills
• Excellent Communication
• Collaboration Skills

• Security+
• CISSP
• CISM
• CISA

• Information Security
• Vulnerability Management
• Risk Reporting
• Security Protocols
• Industry Standards

• Service Now
• Vulnerability Scanning Tools
• MS Office