Information Security Risk Analyst

Placements24; Noord-Kaap; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Medical aid

Retirement plan

Generous annual leave

Professional development

Job summary

Placements24 seeks an Information Security Risk Analyst to identify, assess and manage security risks across a Kimberley-based organization. You will collaborate with IT and business units to ensure risks are understood, mitigated, and reported effectively, adopting established risk management frameworks.

The role requires a minimum of 3 years in information security risk management, familiarity with ISO 27001/NIST/COBIT, and strong analytical and communication skills.

Qualifications

• Minimum 3 years in information security risk management or a related compliance role.
• Solid understanding of qualitative and quantitative risk assessment methods.
• Familiarity with information security frameworks such as ISO 27001, NIST, or COBIT.
• Knowledge of common cybersecurity threats and vulnerabilities.

Responsibilities

• Conduct information security risk assessments and vulnerability analyses.
• Identify, analyze, and prioritize information security risks based on potential impact and likelihood.
• Develop and implement risk mitigation strategies and action plans.
• Monitor the effectiveness of existing security controls and recommend improvements.
• Assist in the development and maintenance of the information security risk register.
• Ensure compliance with relevant security policies, standards, and regulations.
• Prepare regular reports on information security risks and mitigation efforts for management.
• Collaborate with IT teams to ensure security requirements are integrated into project lifecycles.
• Stay updated on emerging security threats, vulnerabilities, and risk management best practices.
• Support internal and external audit activities related to information security risk.

Skills

InfoSec risk management

Analytical skills

Communication

Team collaboration

Education

Bachelor's degree in Information Technology, Computer Science, Business Administration

Tools

GRC tools

Job description

About the Role

Our client, a leading insurance provider in Kimberley, Northern Cape , is seeking a proactive and detail-oriented Information Security Risk Analyst. This role is crucial for identifying, assessing, and managing information security risks across the organization. You will work closely with IT and business units to ensure that security risks are understood, mitigated, and reported effectively. The ideal candidate will have a strong understanding of risk management frameworks and methodologies, coupled with practical experience in applying them within a corporate environment. This is an on-site position where you will contribute directly to the robustness of our client's security posture and compliance efforts within Kimberley .

Key Responsibilities

• Conduct information security risk assessments and vulnerability analyses.
• Identify, analyze, and prioritize information security risks based on potential impact and likelihood.
• Develop and implement risk mitigation strategies and action plans.
• Monitor the effectiveness of existing security controls and recommend improvements.
• Assist in the development and maintenance of the information security risk register.
• Ensure compliance with relevant security policies, standards, and regulations.
• Prepare regular reports on information security risks and mitigation efforts for management.
• Collaborate with IT teams to ensure security requirements are integrated into project lifecycles.
• Stay updated on emerging security threats, vulnerabilities, and risk management best practices.
• Support internal and external audit activities related to information security risk.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field.
• Minimum of 3 years of experience in information security risk management or a related compliance role.
• Solid understanding of risk assessment methodologies (e.g., qualitative and quantitative analysis).
• Familiarity with information security frameworks such as ISO 27001, NIST, or COBIT.
• Knowledge of common cybersecurity threats and vulnerabilities.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to document findings clearly.
• Experience with GRC tools is a plus.
• Ability to work effectively both independently and as part of a team.
• Relevant certifications like CompTIA Security+, CRISC, or CISA are advantageous.

Benefits

Our client offers a competitive salary package with opportunities for performance-based bonuses. Benefits include comprehensive medical aid, a retirement savings plan, and generous annual leave. This role is based at our client's offices in Kimberley , providing a stable and professional work environment. Opportunities for professional development and training are available to support career advancement. Join a reputable organization where your expertise in information security risk analysis will be critical in protecting valuable assets and ensuring business continuity.