Security Analyst

Job Description

About The Role We are seeking a Security Analyst with an experience of 6 to 8 years. The ideal candidate should have a strong background as a Technical IT Auditor. The incumbent will be responsible for evaluating and assessing the effectiveness of the organization’s information systems, security protocols, internal controls and compliance with relevant regulations. This role involves conducting in-depth technical reviews of IT infrastructure, applications, databases and networks to ensure the confidentiality, integrity, and availability of data and systems. Requirements Plan and execute end-to-end IT audits, including risk assessments, scoping, testing, and reporting. Evaluate IT general controls, application controls and system development lifecycle processes. Assess network infrastructure, databases and cloud environments for vulnerabilities and compliance. Conduct audits on cybersecurity controls, data privacy mechanisms and incident response preparedness. Review and assess controls related to identity and access management, change management, and backup/recovery. Utilize automated tools and scripts for vulnerability scans and data analysis. Ensure compliance with frameworks such as ISO 27001, HITRUST, GDPR, HIPPA, SOC and SOX. Collaborate with IT, security, and business stakeholders to identify risks and recommend mitigation strategies. Develop corporate Information Security policies and standards and continually monitoring the information security controls, KRIs/KPIs and technical landscape. Providing ISMS awareness trainings. Responding to the Client SIG questionnaires.