Senior Information Security Analyst – Threat & Compliance

OceanWave Maritime; Multan; On-site; PKR 3,954,892 - 4,737,179; Full time

Job summary

OceanWave Maritime in Multan is seeking a highly skilled Information Security Analyst to join our team. You will conduct vulnerability assessments, perform penetration testing, and monitor networks for threats.

The ideal candidate has 5+ years of experience, a CS/IT degree, knowledge of ISO/IEC 27001, NIST and PCI DSS, and the ability to communicate complex concepts to non‑technical stakeholders.

Qualifications

• Minimum 5 years of experience as an Information Security Analyst or similar role.
• Bachelor's or Master's degree in Computer Science, Information Technology, or related field.
• Strong knowledge of information security principles, practices, and technologies.
• Experience with firewalls, IDS/IPS, encryption, and related security technologies.
• Familiarity with ISO/IEC 27001, NIST, and PCI DSS.
• Excellent problem-solving and communication skills.

Responsibilities

• Conduct regular vulnerability assessments and penetration testing.
• Develop and implement security policies and procedures to protect data and systems.
• Monitor network activity for suspicious or unauthorized behavior.
• Investigate security breaches and provide incident response.
• Ensure compliance with industry and government regulations.
• Stay updated on security trends and technologies.

Skills

Vulnerability assessments

Penetration testing

Security policies and procedures

Network monitoring

Incident response

Regulatory compliance

Communication skills

Education

Bachelor's or Master's degree in Computer Science / Information Technology

Tools

Firewalls

IDS/IPS

Encryption methods

Job description

OceanWave Maritime in Multan is seeking a highly skilled Information Security Analyst to join our team. You will conduct vulnerability assessments, perform penetration testing, and monitor networks for threats.

The ideal candidate has 5+ years of experience, a CS/IT degree, knowledge of ISO/IEC 27001, NIST and PCI DSS, and the ability to communicate complex concepts to non‑technical stakeholders.