Information Security Analyst

Our client has an opportunity available for an Information Security Analyst. 
 Requirements: 
 
 • 5 years’ experience within either an Information Security position or Cybersecurity, which include protection against social engineering, or security vulnerability remediation, of which:
 
 • 2 years’ IT administration experience.
 • 2 years’ Ethical Hacking experience.
 

 • In-depth knowledge of Cloud security platform.
 • In-depth knowledge of Firewalls and Malicious Code Defence including APT.
 • Knowledge of Cybersecurity technical assessments, standards, tools, and processes.
 • Knowledge of common attack vectors.
 • Knowledge of Vulnerability assessment tools.
 • Endpoint and network security tools or techniques.
 • Bachelor’s degree in Information Security or similar.
 • Industry certifications.
 



 KPAs: 



 
 • Support with development and maintenance of Cyber Security Road Maps and interventions.
 • Create and maintain appropriate standard operating procedures for Cyber Security and information protection.
 • Identify, respond, predict and analyse security breaches and threats to determine their root cause.
 • Research, investigate and develop proficiency in current and emerging threats, vulnerabilities, and security technology developments.
 • Work closely with other stakeholders to design, architect, consult and implement security solutions to ensure readiness for security technologies.
 • Contribute to project risk management consulting and technical reviews, drafting mitigation plans and delivering on any actionable items allocated.
 • Draft procedures and policies with regards to cyber security.
 • Monitor and analyse Cybersecurity operational services.
 • Identify and resolve vulnerabilities in networks, servers, systems, and applications by performing vulnerability scans.
 • Audit vendor services and report on non-performance or execution deficiencies to the Information Security Officer.
 • Maintain compliance with core risk management concepts, such as vulnerability management and threat intelligence.
 • Create a collaborative program to coordinate and drive operational activities related to Cyber Security.
 • Advise Technology business partners on regulatory, compliance and legal requirements as it relates to securing data.
 • Lead and collaborate on lessons learned and root cause activities.
 • Manage internal control framework ensuring internal controls are reviewed periodically by departments as well as driving internal control adherence and compliance.
 • Monitor and drive compliance against the audit framework.
 • Conduct technical security reviews and perform technical risk assessments.
 • Act as a change management architect in periods of change to ensure continuity to operations.