Information Security Analyst

Role & responsibilities

1.

• Conduct security audits and assessments to identify vulnerabilities.
• Perform penetration testing and ethical hacking to simulate cyberattacks.
• Evaluate compliance with regulations like

  ISO 27001, NIST, GDPR, HIPAA, SOC 2

  .

2.

• Develop and implement

  cybersecurity policies, procedures, and frameworks

  .
• Advise organizations on best practices for

  risk management, data protection, and incident response

  .
• Assist in aligning security strategies with

  business objectives and compliance mandates

  .

3.

• Help organizations develop

  incident response plans (IRP)

  .
• Conduct

  forensic investigations

  in the event of security breaches.
• Provide

  real-time threat intelligence

  and recommend proactive security measures.

4.

• Recommend and deploy

  firewalls, SIEM, IDS/IPS, endpoint security, and cloud security tools

  .
• Guide organizations on

  zero-trust architecture, identity access management (IAM), and encryption

  .
• Assist in setting up

  secure cloud environments (AWS, Azure etc..)

  .

5.

• Conduct

  cybersecurity training sessions

  for employees and executives.
• Educate teams on

  social engineering attacks (phishing, BEC, ransomware defense)

  .

Preferred candidate profile

• Candidates are preferred to hold or be actively pursuing related professional certifications such as CISSP, CISM or CISA
• Knowledge of common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT