Information Security Analyst

About the role

The Information Security Analyst protects the organization’s data, systems, and networks from cyber threats. You will monitor security events, investigate incidents, and ensure compliance with industry standards.

Key responsibilities

• Monitor security tools (SIEM, firewalls, EDR, antivirus) and detect suspicious activity.
• Investigate, analyze, and respond to security alerts and incidents, performing root‑cause analysis.
• Conduct vulnerability assessments, coordinate penetration testing, and recommend remediation.
• Support compliance with ISO 27001, NIST, Data Privacy Act and maintain security policies.
• Collaborate with IT teams to implement security controls and manage access provisioning.
• Deliver security awareness training, phishing simulations, and produce reports for management.

Required profile

• Bachelor’s degree in IT, Computer Science, Information Security or related field.
• 2–4 years of experience in information security, security operations, or related roles.
• Relevant certifications (CompTIA Security+, CEH, CISSP, CISM) preferred.
• Experience with security monitoring, incident response, and vulnerability management.

Required skills

• SIEM platforms
• Firewalls and endpoint detection & response (EDR)
• Antivirus solutions
• Employee monitoring tools (e.g., Teramind)
• Vulnerability assessment and penetration testing tools
• Knowledge of ISO 27001, NIST frameworks
• Understanding of data privacy regulations
• Security policy development and enforcement
• Business continuity and disaster recovery planning
• Access management and phishing simulation