Information Security Analyst

The Tech Stack Deep-Dive Must-Haves:

• Security Ops & Analysis: IT security log analysis, malware resolution, and incident assessment/remediation. • Vulnerability & Testing: Vulnerability scanning, annual penetration testing coordination, and risk assessments. • Standards & Compliance: ISO27001 ISMS management, Statement of Applicability, risk treatment plans, and internal/external audit management. • Qualifications: Diploma / NQF Level 6 in Computer Science or Information Systems. Up to 3 years of hands-on IT Security experience. Nice-to-Haves:

• Cloud & Security Tech: Microsoft Azure Security Technologies (AZ-500 certification). • Frameworks & Best Practices: DevSecOps lifecycle integration, ISO27001 ISMS certification, and IT Security Governance experience. Key Responsibilities

• Proactive Security Ops: Monitor log activity, resolve identified malware, conduct risk assessments, and support end-to-end incident response investigations. • Vulnerability & Threat Management: Lead annual penetration testing and vulnerability scanning, analyze internal/external cyber threats, and enforce mitigation strategies. • Governance & Audit Leadership: Maintain ISO27001 compliance documentation, complete client/supplier security audits, and manage role-based access control (RBAC) life cycles. • DevSecOps & Tech Advisory: Integrate security practices into DevSecOps workflows, evaluate new security tools, and deliver security awareness training across the firm. Why Join Us?

• High-Impact Autonomy: Take full ownership of risk remediation and technology evaluations while directly advising business units on security best practices.
• Modern Security Infrastructure: Work with modern cloud environments (Azure) and stay on the cutting edge of cyber threat analysis and DevSecOps practices.
• Continuous Growth: Expand your expertise with access to learning and development initiatives while leading enterprise-level ISO27001 audits.

.special-hidden { display: none; }