Senior Information Security Analyst

Placements24; Midrand; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Hybrid work model

Professional development

Health insurance

Job summary

Placements24 in Midrand seeks a Senior Information Security Analyst to safeguard digital assets and lead security initiatives. You will shape strategies, policies, and procedures to protect data and the IT backbone, collaborating across IT and business units.

The ideal candidate has 5+ years in information security, with hands-on expertise in risk assessment, threat detection, and incident response, plus familiarity with ISO 27001/NIST frameworks. Hybrid work model offered.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years of experience in information security or cybersecurity.
• Experience with ISO 27001, NIST or similar frameworks.
• Knowledge of network/endpoint security, threat detection, and incident response.
• Understanding of cryptography, security architecture, and risk management.
• CISSP, CISM, or CEH certifications desirable.

Responsibilities

• Develop, implement, and manage information security strategies and policies.
• Conduct security risk assessments and vulnerability analyses across systems and apps.
• Monitor security infrastructure for breaches and incidents, respond promptly.
• Lead incident response: investigation, containment, eradication, recovery.
• Collaborate with IT and business units to embed security into design and operations.
• Stay current on threats and mitigations, provide staff training.

Skills

Security frameworks

Network security

Endpoint security

Threat detection

Incident response

Cryptography

Security architecture

Risk management

Certifications

Education

Bachelor's degree in CS/Info Security

Job description

About the Role

Our client is seeking a highly skilled and experienced Senior Information Security Analyst to join their dynamic team in Midrand. This pivotal role involves safeguarding the organization's digital assets against evolving cyber threats. You will be instrumental in developing and implementing robust security strategies, policies, and procedures to protect sensitive data and maintain the integrity of our IT infrastructure. The ideal candidate possesses a deep understanding of current security landscapes and is proactive in identifying and mitigating potential risks, contributing to a secure and resilient operational environment.

Key Responsibilities

• Develop, implement, and manage comprehensive information security strategies and policies.
• Conduct regular security risk assessments and vulnerability analyses across all systems and applications.
• Monitor security infrastructure and systems for breaches, intrusions, and other security events, responding promptly to incidents.
• Lead incident response efforts, including investigation, containment, eradication, and recovery.
• Collaborate with IT and business units to ensure security requirements are integrated into system designs and operations.
• Stay abreast of the latest security threats, vulnerabilities, and mitigation techniques, providing guidance and training to staff.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 5 years of experience in information security, cybersecurity, or a closely related role.
• Proven experience with security frameworks (e.g., ISO 27001, NIST) and compliance standards.
• Expertise in network security, endpoint security, threat detection, and incident response.
• Strong understanding of cryptography, security architecture, and risk management principles.
• Relevant certifications such as CISSP, CISM, or CEH are highly desirable.

Benefits

• Competitive annual salary and performance-based incentives.
• Comprehensive health, dental, and vision insurance plans.
• Opportunities for professional development, including certifications and training.
• A hybrid work model offering flexibility between office and remote work.
• Access to cutting-edge security tools and technologies.