Information Security Analyst

TalentHue - IT & Corporate Recruitment; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

TalentHue is seeking an Information Security Analyst to design and implement governance frameworks, align controls with PCI, IT SOX, ISO standards, and lead monitoring efforts. The role focuses on risk-based patch management, policy updates, and security training development.

The ideal candidate has 3+ years in information security, a bachelor’s degree in CS, and hands-on experience with SIEM and XDR tools, including MDE and Palo Alto XDR. Night shift availability required.

Qualifications

• Design and implement security frameworks aligned with ISO 27001/OSINT and regulatory standards.
• Lead risk assessments and mitigation strategies for vendors.
• Drive PCI DSS and IT SOX compliance initiatives and audits.
• Establish baseline hardening standards for IT systems and applications.
• Ensure continuous monitoring with SIEM/XDR and related tools.
• Improve patch management through risk-based prioritization.
• Update security policies and procedures to industry standards.
• Develop cybersecurity awareness training content for staff.
• Conduct vulnerability scans, penetration tests, and remediation.

Responsibilities

• Design and implement security governance frameworks to manage cyber risks.
• Coordinate vendor risk assessments and mitigation activities.
• Lead PCI DSS and IT SOX compliance initiatives and audits.
• Establish baseline hardening standards for IT systems.
• Ensure continuous monitoring with SIEM, XDR and related tools.
• Enhance patch management processes using a risk-based approach.
• Update security policies and procedures to align with standards.
• Develop cybersecurity awareness training content for staff.
• Conduct vulnerability scans and penetration testing and remediation.

Skills

Security frameworks

Vendor risk management

PCI DSS

IT SOX

SIEM/XDR

Patch management

Policies and procedures

Cybersecurity awareness

Vulnerability assessments

Education

Bachelor’s degree in Computer Science

Tools

Microsoft Defender for Endpoint (MDE)

Microsoft Sentinel

Defender for Cloud Apps

DLP

Rapid7

Palo Alto XDR

Job description

Follow us on LinkedIn to get job related updates.

5,700

A leading children apparel retailer in USA having its stores all over the globe

Role Introduction

The Information Security Analyst will design, integrate, and enhance information security governance frameworks to manage cyber risks. This role ensures security controls align with regulatory requirements (e.g., PCI, IT SOX) and industry best practices, maintaining consistency across the organization.

Features

• Night Shift (6PM-3AM)

Requirements

• Develop and implement security frameworks (e.g., ISO 27001:2013, SANS Top 20, OWASP Top 10).
• Manage vendor risk assessments and mitigation strategies.
• Lead PCI DSS and IT SOX compliance initiatives.
• Establish baseline hardening standards for IT systems.
• Ensure systems are monitored by SIEM, XDR, and other security tools.
• Enhance patch management processes using a risk-based approach.
• Update policies/procedures to align with industry standards and business needs.
• Develop cybersecurity awareness training content.
• Conduct vulnerability scans, penetration tests, and remediation.

Specifications

• Bachelor’s degree in Computer Science or related field.
• 3+ years in information security roles.
• Certifications: CISSP, CISA, or CISM (preferred).
• Experience with compliance frameworks (ISO, PCI, IT SOX).
• Experience in Microsoft Security Suite (MDE, Sentinel for SIEM, Defender for Cloud Apps, DLP) Rapid7 and Palo Alto XDR
• Knowledge of data classification, access controls, and security models.
• Hands-on experience with DLP, XDR, FIM, Application Whitelisting, ERM.
• Familiarity with authentication protocols (e.g., SAML, OAuth) and encryption algorithms.

Expertise

Skills: Application Whitelisting , DLP , ERM , FIM , ISO , IT SOX , Network Security , Oauth , PCI , Penetration Tests , SAML , SIEM , TCP/IP , Vulnerability Scans , XDR

About TalentHue

TalentHue provides scalable, reliable Tech Recruitment, Corporate Recruitment and Consulting (Strategy, Operations, Performance) services. Our Recruitment and HR consultants will work alongside your team to meet the unique needs of your business.