Information Security Analyst - IT Compliance (3-5 yrs)

Job Description :

The Information Security Analyst will support the Team Lead, Security Operations with identifying, analysing and influencing the management of information risks across the organization in support of legal and regulatory compliance needs as well as general IT and organizational information security practices.

Responsibilities :

- Support the design and implementation of strategies for information security and other risk related processes globally.

- Support IT security standards and develop supporting organizational policies, procedures and work instructions.

- Support and maintain the Information Security Management program to ensure that information assets and associated information systems are adequately protected.

- Collaborate with various business units to identify and facilitate the implementation of appropriate controls to effectivity manage information risks.

- Conduct security assessments for new and existing systems and processes.

- Act as a security consultant for internal business teams in an effort to implement and support new and existing technologies.

- Facilitate the supplier information security evaluation process.

- Support internal and external audit initiatives for SOX, ISO, etc.

- Lead or participate in IT projects as assigned.

Requirements :

- Bachelor's Degree or equivalent industry training and certifications

- 3 to 5+ years of relevant work experience

- Knowledge and experience with information security across various platforms

- Knowledge of global privacy laws (GDPR and HIPAA) and industry regulations

- Understanding of common information security management frameworks (ISO, NIST, etc.)

- Excellent written and verbal communication skills

- Strong interpersonal skills with the ability to work both independently and as part of a team.

- Ability to work under tight deadlines and prioritize responsibilities

- Ability to handle and maintain confidential information

Desired :

- Professionally recognized information security certification or willing to complete within 6 months.

- Currently held certification for ISO 27001 lead implementer or lead auditor.

- Past work experience at a Big Four (or large public accounting firm) and SOX requirements.

- Project Management, time management and prioritization skills