Information Security Analyst

About the role

You will join the Information Security team to help manage cybersecurity risk and ensure compliance with internal policies, standards, and regulatory requirements. The role offers the chance to develop expertise across technical, security, risk, and compliance domains.

Key responsibilities

• Collaborate with the InfoSec team to manage cyber risk and maintain a robust governance framework.
• Develop, maintain, and enforce ISMS policies, standards, and procedures aligned with ISO/IEC 27001.
• Implement security controls and risk‑assessment frameworks that meet regulatory requirements.
• Evaluate risks, document control failures, and report gaps to senior management.
• Conduct information systems audits, monitoring, and assessments.
• Perform malware detection, analysis, and evasion technique reviews.
• Deliver security awareness training to promote a culture of risk awareness and accountability.

Required profile

• 2–3 years of experience in cybersecurity, IT audit, or GRC roles.
• Proven experience with information systems audit processes.
• Relevant certifications (e.g., ISO 27001 Lead Auditor, CISSP) are a plus.

Required skills

• Working knowledge of ISO/IEC 27001 standards.
• Familiarity with NIST frameworks and data protection laws.
• Experience developing and maintaining ISMS policies.
• Ability to implement security controls and risk‑assessment frameworks.
• Knowledge of information systems auditing and monitoring.
• Expertise in malware detection, analysis, and evasion techniques.