Information Security Analyst

Gcssystems Limited; London; On-site; NOK 538,793 - 754,310; Full time

Benefits offered by this job

Health insurance

Retirement Plans

Paid time off

Professional Development

Flexible work arrangements

Job summary

Gcssystems Limited in Norway is seeking an Information Security Analyst to safeguard sensitive information and systems from unauthorized access. The role involves analyzing security risks, implementing measures, and responding to incidents.

The ideal candidate will have a Bachelor’s degree in a related field and relevant certifications. Key benefits include health insurance, retirement plans, and flexible work arrangements.

Qualifications

• Proven experience in information security analysis, including risk assessment and incident response.
• Strong understanding of security frameworks like ISO 27001 and NIST.
• Detail-oriented mindset with a keen eye for identifying security risks.

Responsibilities

• Conduct regular security assessments and vulnerability scans.
• Develop and implement security policies and procedures.
• Monitor security systems and respond to incidents.
• Collaborate with stakeholders to design secure systems.

Skills

Risk assessment

Incident response

Vulnerability management

Security architecture

Networking concepts

Analytical skills

Communication skills

Education

Bachelor's degree in computer science, information security, or related field

CISSP, CISM, or CEH certifications

Tools

Firewalls

SIEM

Vulnerability scanners

Job description

The Information Security Analyst is responsible for protecting the organization’s sensitive information and systems from unauthorized access, potential threats, and vulnerabilities. They will analyze and assess security risks, implement security measures, monitor security systems, and respond to security incidents. The Information Security Analyst will collaborate with various stakeholders to ensure the confidentiality, integrity, and availability of the organization’s data and systems.

Key Responsibilities

• Conduct regular security assessments and vulnerability scans to identify potential risks and vulnerabilities in the organization’s infrastructure, systems, and applications.
• Develop and implement security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.
• Monitor security systems and tools, including intrusion detection/prevention systems, firewalls, antivirus software, and log management systems, to detect and respond to security incidents.
• Investigate security incidents, analyze root causes, and recommend appropriate corrective actions to prevent future occurrences.
• Manage access control systems and enforce user authentication and authorization policies to protect sensitive data and systems from unauthorized access.
• Collaborate with IT teams and business stakeholders to design and implement secure network architectures, systems, and applications.
• Conduct security awareness training and education programs to promote a security-conscious culture among employees.
• Stay up-to-date with the latest security trends, vulnerabilities, and technologies, and make recommendations for continuous improvement of security practices.
• Participate in security audits and compliance assessments, ensuring adherence to regulatory requirements and industry best practices.
• Maintain documentation of security policies, procedures, incident response plans, and security incident reports.

Qualifications and Skills

• Bachelor’s degree in computer science, information security, or a related field. Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH) are highly desirable.
• Proven experience in information security analysis, including risk assessment, vulnerability management, incident response, and security architecture.
• Strong understanding of networking concepts, operating systems, databases, and web technologies.
• Familiarity with security frameworks and standards, such as ISO 27001, NIST, and PCI DSS.
• Knowledge of security technologies, including firewalls, intrusion detection/prevention systems, SIEM, antivirus software, and identity and access management solutions.
• Experience with security assessment tools and techniques, such as vulnerability scanners, penetration testing, and log analysis.
• Excellent analytical and problem-solving skills, with the ability to prioritize tasks and handle multiple projects simultaneously.
• Strong communication and interpersonal skills to effectively collaborate with cross-functional teams and present complex security concepts to non-technical stakeholders.
• Detail-oriented mindset with a keen eye for identifying security risks and potential vulnerabilities.
• Ability to work in a fast-paced environment and respond quickly to security incidents and emerging threats.

Benefits

• Health insurance Many organizations offer comprehensive health insurance plans, including medical, dental, and vision coverage, for information security professionals and their families.
• Retirement Plans Employers may provide retirement savings plans such as 401(k) with matching contributions or pension plans.
• Paid time off Information security professionals typically receive vacation days, sick leave, and holidays.
• Bonus and incentives Some organizations provide performance-based bonuses or incentives tied to achieving security goals or milestones.
• Professional Development Employers often support professional development by offering training programs, certifications, and conference attendance to help information security professionals stay updated with the latest industry trends and technologies.
• Flexible work Arrangements Many organizations offer flexible work hours or remote work options, allowing information security professionals to maintain a healthy work-life balance.
• Employee assistance programs These programs provide resources for mental health support, counseling services, and other wellness initiatives.
• Tuition Reimbursement Some companies provide financial assistance or tuition reimbursement for employees pursuing further education or advanced certifications in the field of information security.