Role Overview
A leading organization is seeking a Senior Security Analyst to support and strengthen its information security function. This role is responsible for protecting systems, ensuring regulatory compliance, managing security risks, and supporting incident response activities across the organization.
The position requires a strong blend of technical expertise, risk awareness, and collaboration with cross-functional teams to maintain a robust security posture. Key Responsibilities
Information Security Management
- Perform regular security assessments and vulnerability scans to identify risks across systems and infrastructure
- Implement and maintain controls to safeguard systems, data, and networks from unauthorized access and threats
- Monitor security alerts and logs, investigate anomalies, and respond to incidents in a timely manner
- Support the development and enforcement of internal security policies, standards, and procedures
- Partner with technology teams to ensure secure system configurations and deployments
- Stay informed on emerging threats, tools, and best practices to continuously enhance security capabilities
Compliance & Regulatory Support
- Ensure alignment with applicable security standards, regulations, and contractual obligations (e.g., data privacy and industry frameworks)
- Conduct internal assessments and audits to validate compliance
- Prepare documentation and reports for internal and external stakeholders
- Collaborate with relevant stakeholders to interpret regulatory requirements and implement necessary controls
- Provide guidance on compliance matters and support remediation efforts
Risk Management
- Identify and evaluate security risks based on likelihood and potential impact
Recommend and implement mitigation strategies to reduce exposure
Work closely with business units to integrate security practices into operational processes
Security Awareness & Training
- Deliver security awareness sessions to promote a culture of security across the organization
- Educate employees on policies, procedures, and best practices to minimize human-related risks
Testing, Incident Response & Forensics
- Conduct testing of applications and environments to identify vulnerabilities and emerging threats
- Participate in incident response activities, including investigation and resolution
- Assist with evidence collection, forensic analysis, and incident reporting
Qualifications & Experience
- Bachelor’s degree in Computer Science, Information Technology, or a related field
- Proven experience in information security, compliance, or a related discipline
- Professional certifications (e.g