Senior IT & Information Security Analyst

As a Senior IT & Information Security Analyst at Makse Group, you will play a crucial role in enhancing the stability, security, and compliance of the technology infrastructure. Your expertise in IT operations and cybersecurity will be utilized to support cross-functional teams, manage security protocols, and contribute to strategic improvements aligned with industry best practices and regulatory standards. **Key Responsibilities:** - Support and monitor daily IT infrastructure operations to ensure system availability, performance, and security. - Lead advanced troubleshooting for IT issues and provide Tier 2/3 support for end users. - Administer and enhance endpoint protection, firewalls, identity management, and other security tools. - Manage device provisioning and configuration for new hires and existing employees in compliance with company standards. - Assist in evaluating and implementing IT policies, security controls, and risk mitigation measures. - Contribute to cybersecurity incident detection and response, including root cause analysis and documentation. - Coordinate with vendors and internal stakeholders to maintain system integrity and uptime. - Ensure ongoing compliance with regulatory frameworks such as ISO 27001, SOC 2, NIST, and GDPR. - Maintain asset inventory, assist with IT procurement, and manage hardware and software lifecycle. - Collaborate with cross-functional teams on IT projects, audits, and control implementations. - Develop and update end-user documentation, security awareness materials, and technical SOPs. - Stay informed on emerging cybersecurity threats and recommend security posture updates as necessary. **Requirements:** - Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field. - 3+ years of experience in IT infrastructure, helpdesk, or cybersecurity roles. - Strong understanding of cybersecurity frameworks, principles, and tools. - Experience with Microsoft Managed Device infrastructure and modern endpoint management platforms. - Familiarity with cloud technologies (e.g., Azure, AWS, Google Cloud). - Hands-on experience with firewalls, antivirus, identity management, and vulnerability management tools. - Working knowledge of regulatory standards such as ISO 27001, NIST, SOC 2, HIPAA. - Excellent problem-solving, communication, and documentation skills. - Ability to communicate complex technical issues to non-technical users and leadership. - Preferred certifications: CompTIA Security+, Network+, Azure Fundamentals, ITIL, or equivalent.,