Information Security Analyst (Remote)

The Hive Careers Ltd; España; A distancia; EUR 35.000 - 55.000; Jornada completa

Descripción de la vacante

A leading company is seeking an Information Security Analyst to work remotely, focusing on protecting information assets and managing security risks. You'll collaborate with the Information Security team to conduct assessments, monitor compliance, and support incident response efforts. Ideal candidates should have experience in risk management and a solid understanding of security standards.

Formación

• Experience with IT risk assessments and incident handling.
• Knowledge of application and cloud security standards.
• Familiarity with security compliance testing tools.

Responsabilidades

• Conducts IT risk assessments and monitors compliance with security policies.
• Assists in incident detection, response, and mitigation.
• Helps ensure application and cloud deployments meet security standards.

Conocimientos

Risk management

Incident response

Vulnerability assessment

Compliance monitoring

Descripción del empleo

About the job: Information Security Analyst (Remote)

Job Title: Information Security Analyst

Job Type: Full-Time/Contract - 2 years (renewable)

Location: Trinidad and Tobago (Remote)

Role Summary:

Working collaboratively with the Information Security team and third-party service providers, the Information Security Analyst will contribute to the protection of the Bank's information assets. The incumbent will assist in identifying and analyzing security anomalies and applying mitigating actions as instructed by management. The Analyst will also assist in managing information security risks related to the use, processing, storage, and transmission of information and the systems and processes used for those purposes.

The incumbent will help embed policies, standards, and procedures related to the Bank's security posture and will assist in security tests, risk assessments, exercises, simulations, initial investigations of security breaches, user training, and other security activities as needed. The Analyst will work closely with server and network operations to ensure stability of the Bank's information security posture and may liaise with internal and external auditors for audit reviews throughout the year.

Key Responsibilities:

Governance and risk management:

• Supports the manager with IT risk assessments, including information security assessments (ISAs), threat risk assessments (TRAs), vulnerability scans, penetration testing, etc., and follows up on open issues.
• Assists with validation of identified vulnerabilities as directed.
• Monitors compliance with information security policies and standards, raises incidents of non-compliance, and ensures resolution and learning.

Incident and problem management:

• Assists with collecting and evaluating information for investigating alerts from security tools and third-party providers.
• Immediately informs the manager of critical events.
• Prepares information for further investigation of incidents.
• Supports incident response and mitigation efforts.

Secrets management:

• Assists with requests for security profiles, reviews requests, and prepares drafts for approval.
• Helps maintain security matrices and reviews changes to user authentication.
• Assists with processing requests for certificates, tokens, and keys.

General tasks:

• Collects data for KPIs and KRIs.
• Tests new hardware and software for security compliance before deployment.
• Reviews and acts on security alerts within SLA.
• Performs other tasks as assigned.

Application and Cloud Security:

• Ensures application code and cloud deployments meet security standards.
• Assists with application security testing and coordinates tests with third-party providers.