Information Security Analyst (Remote)

The Hive Careers Ltd; Oviedo; A distancia; EUR 35.000 - 55.000; Jornada completa

Descripción de la vacante

A leading company in the financial sector is seeking an Information Security Analyst to join their remote team. The position involves collaborating with various teams to enhance the security of information assets, including managing risks, handling incidents, and ensuring compliance with security policies. This role offers a full-time contract of 2 years, renewable, with the potential for professional growth in a crucial area of cybersecurity.

Formación

• Experience with IT risk assessments and security assessments.
• Strong understanding of compliance with information security policies.
• Ability to work collaboratively within teams and with third-party providers.

Responsabilidades

• Supports IT risk assessments and compliance monitoring.
• Assists with incident response and analysis.
• Ensures application code meets security standards.

Conocimientos

Risk Management

Incident Management

Security Compliance

Collaboration

Educación

Degree in Information Security or related field

Descripción del empleo

About the job : Information Security Analyst (Remote)

Job Title : Information Security Analyst

Job Type : Full-Time / Contract - 2 years (renewable)

Role Summary :

Working collaboratively with the Information Security team and third-party service providers, the Information Security Analyst will contribute to the protection of the Bank's information assets. The incumbent will assist in identifying and analyzing security anomalies and applying mitigating actions as instructed by management. The Analyst will also assist in managing information security risks related to the use, processing, storage, and transmission of information and the systems and processes used for those purposes.

The incumbent will help embed policies, standards, and procedures related to the Bank's security posture and will assist in security tests, risk assessments, exercises, simulations, initial investigations of security breaches, user training, and other security activities as needed. The Analyst will work closely with server and network operations to ensure stability of the Bank's information security posture and may liaise with internal and external auditors for audit reviews throughout the year.

Key Responsibilities :

Governance and risk management :

• Supports the manager with IT risk assessments, including information security assessments (ISAs), threat risk assessments (TRAs), vulnerability scans, penetration testing, etc., and follows up on open issues.
• Assists with validation of identified vulnerabilities as directed.
• Monitors compliance with information security policies and standards, raises incidents of non-compliance, and ensures resolution and learning.

Incident and problem management :

• Assists with collecting and evaluating information for investigating alerts from security tools and third-party providers.
• Immediately informs the manager of critical events.
• Prepares information for further investigation of incidents.
• Supports incident response and mitigation efforts.

Secrets management :

• Assists with requests for security profiles, reviews requests, and prepares drafts for approval.
• Helps maintain security matrices and reviews changes to user authentication.
• Assists with processing requests for certificates, tokens, and keys.
• Collects data for KPIs and KRIs.
• Tests new hardware and software for security compliance before deployment.
• Reviews and acts on security alerts within SLA.
• Performs other tasks as assigned.

Application and Cloud Security :

• Ensures application code and cloud deployments meet security standards.
• Assists with application security testing and coordinates tests with third-party providers.

J-18808-Ljbffr