Information Security Analyst (Immd Joiner)

Purpose

Information Security Analyst /Consultant

Responsibilities

1. Security Risk Assessment & Auditing

• Conduct security audits and assessments to identify vulnerabilities.
• Perform penetration testing and ethical hacking to simulate cyberattacks.
• Evaluate compliance with regulations like

  ISO 27001, NIST, GDPR, HIPAA, SOC

2

• Develop and implement

  cybersecurity policies, procedures, and frameworks

  .
• Advise organizations on best practices for

  risk management, data protection, and incident response

  .
• Assist in aligning security strategies with

  business objectives and compliance mandates.

3. Threat Management & Incident Response

• Help organizations develop

  incident response plans (IRP)

  .
• Conduct

  forensic investigations

  in the event of security breaches.
• Provide

  real-time threat intelligence

  and recommend proactive security measures.

Implementation of Security Solutions

• Recommend and deploy

  firewalls, SIEM, IDS/IPS, endpoint security, and cloud security tools

  .
• Guide organizations on

  zero-trust architecture, identity access management (IAM), and encryption

  .
• Assist in setting up

  secure cloud environments (AWS, Azure etc..)

5. Security Awareness & Training

• Conduct

  cybersecurity training sessions

  for employees and executives.
• Educate teams on

  social engineering attacks (phishing, BEC, ransomware defense)

  .

Competencies

• A Bachelor's/masters degree in computer science or a related discipline, or equivalent work experience
• Experiencing in reviewing Mobile applications & platforms, with knowledge of Cloud Environment set up, and knowledge of common information security requirements for such platforms is a plus
• Experience providing and validating security requirements related to information system design and implementation
• Experience providing and validating security requirements related to a broad range of operating systems and databases
• Experience conducting risk assessments, vulnerability assessments, vendor and third-party risk assessments and recommending risk remediation strategies
• Experience in the use of tools and methods to identify security exposures and business risks
• Familiarity with information system attack methods and vulnerabilities
• Working experience with the design and engineering of web-based multi-tier information systems and architecture design
• Working experience with web technologies and programming languages
• Working experience with operating systems and database platforms

Experience

Technical skills / Certifications

• Technical Skills:

1. SIEM (Splunk etc..)
2. IDS/IPS, Encryption, IAM
3. EDR (CrowdStrike, Microsoft Defender, Sophos, Eset etc..)
4. Firewalls & Network Security (Cisco ASA, Sophos, Azure WAF etc..)
5. Cloud Security (AWS Security Hub, Azure Sentinel)
6. Ethical hacking & Penetration Testing (Kali Linux, Metasploit, Burp Suite)
7. Programming (Python, Bash, PowerShell)

• Candidates are preferred to hold or be actively pursuing related professional certifications such as CISSP, CISM or CISA
• Knowledge of common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT