IT SECURITY ANALYST / UP TO $8K

Risk Management:

• Assess technologies and solutions against cyber security standard.
• Identify, analyse, and prioritize cyber security risks.
• Assess and advise security by design concepts in Cloud platforms such as AWS or Azure
• Cloud. Develop and oversees implementation of risk mitigation strategies and controls.
• Maintain and update the organization's risk register.

Compliance:

• Stay up-to-date on relevant IT security regulations and standards (e.g., PCI-DSS, ITRM, IM8,etc).
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities.
• Report on compliance status to relevant stakeholders.
• Establish compliance initiatives to ensure conformance with security requirements

Security Operations:

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures. Business Continuity Planning and Management:
• Review existing and/or develop new corporate crisis plans and policies to ensure relevance in tandem with the company or external changes.
• Plan and coordinate simulation exercises to ensure the company preparedness for potential disruptions.
• Execute business continuity & resilience awareness initiatives to enhance workforce resilience.

Collaboration:

• Work closely with IT operations, development, and other business units to promote security awareness and best practices.
• Provide guidance and training to employees on security policies and procedures.
• Collaborate with external auditors and regulators.
• Prepare regular management reports on overall IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• Minimum of 3-5 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools and technologies (e.g., DLP solutions, SIEM, IDS/IPS).