Security Analyst - Cloud Security & Risk Assessments

About the role

The Security Analyst administers cloud security policies, enforces preventive and recovery strategies, and carries out vulnerability and risk assessments for Managed Services customers, minimizing internal and external security threats. The role is hybrid (onsite and remote) and requires travel flexibility.

Key responsibilities

• Risk and vulnerability management: conduct risk, gap and vulnerability assessments across customer environments, cloud platforms and IT infrastructure using standard security tools and frameworks.
• Security operations and incident response: respond to security incidents across all project lifecycles, take part in incident response workflows and implement authorised security enhancements through a strict change management process.
• Client advisory and auditing: audit customer systems, deliver clear reports on identified risks and recommended remediations, and lead client discussions on findings.
• Governance and project guidance: advise internal project teams and client stakeholders on physical and technical controls, security guidelines and compliance standards.
• Reporting and continuous improvement: generate operational security metrics for management and refine information security practices across As-A-Service offerings.

Required profile

• 1-3+ years of dedicated experience in an IT security role within an enterprise or Managed Services (MSP) environment.
• Tertiary qualification in Information Systems, Computer Science or equivalent practical IT experience.
• Exceptional written and verbal communication, strong technical documentation skills, proven negotiation ability and composure under pressure.
• Self-starter able to work with minimal supervision and with a proactive advisory mindset.

Required skills

• Hands-on knowledge of Windows and Linux/UNIX, secure network architectures, IAM and firewall/IDS/IPS protocols.
• Preferred certifications: CISSP, CISA, CISM, OSCP, CEH, GIAC; vendor certs such as Fortinet NSE 4+, Palo Alto PCNSA/PCNSE, Check Point CCSA, Cisco CCNA/CCNP Security.
• Familiarity with ISO 27001/2, ISO 31000, NIST, COBIT or ITIL v3.