Senior Analyst - Information Security

Job Title

Senior Analyst – Information Security

Reporting Structure Manager – ISMS

Education

Minimum Bachelor's Technical Degree in CS/EXTC/IT

Advanced degree preferred like MSc-IT or CS /ME/MTech

CS/IT or Specialization of IT/Computer Stream

Experience/

Qualifications

Minimum of 3 years relevant experience and maximum of

6 years of total experience

Mandatory experience of 3-6 years of experience

managing security Control implementation, audits, such

as, ISO 27001 including preparing control owners for

audits, interpreting control requirements, reviewing

control evidence for appropriateness, testing control

effectiveness, presenting control evidence to external

auditors, and audit planning with external auditors.

Must possess excellent (English) written and verbal

communication skills and capable of creating clear, well

written documentation, recommendations, and

reports/communications.

Has sufficient experience and knowledge to plan and

execute work with limited direction and supervision.

Identifies security risks that pose a threat to the

Company’s operations.

Partners with internal teams to develop plans for risk

reduction associated with gaps identified.

Knowledge of security frameworks ISO, or NIST.

Recommends administrative and technical controls to

mitigate risks.

Partners with internal teams to develop plans for risk

reduction associated with gaps identified.

Track, report, and ensure status of security exceptions by

line of business.

Perform risk assessments, document and track findings

through resolution.

SKILLS AND BEHAVIORS:

Drive multiple complex projects, achieve key milestones,

with ability to reprioritize work in a fast-paced

environment.

Sustain effective engagement with IT, Security, and

Compliance business partners, and with Auditors, and

Regulators.

Must take ownership, demonstrate a sense of urgency,

and ensure accuracy and quality.

Must manage ambiguity, perform in a fast-paced

environment, and resolve urgent and competing

demands.

Must support planned & unplanned workload demands,

with the measured courage to say "no," to focus on key

priorities.

Perform other duties and responsibilities, as assigned. Must be willing and able to work flexible hours and go

above-&-beyond to deliver outcomes.

Advanced-level communication, presentation, and

relationship management skills.

Responsibilities

IT & Security governance, risk, and compliance

frameworks and practices (e.g. COBIT, NIST-CSF, ISO).

IT & Security risk & security controls (e.g. cyber security,

network, infrastructure, applications, and projects).

Internal control implementation, including the evaluation

of the design and operating effectiveness of controls

Advanced knowledge of testing techniques and data

analysis principles, as well as the ability to interpret

results.

IT & Security audit, risk and compliance.

Proficiency with GRC systems

Certifications

One or more relevant qualifications of CRISC, CISM, CISA.

ISO 27001 LA or LI