Information Security Analyst

The Information Security Analyst is responsible for supporting the execution of the Information Security strategy. The Information Security Analyst provides data and analysis to measure the effectiveness of Information Security controls across group wide products and services. The Information Security Analyst identifies and evaluates potential areas of Information Security threats by assessing the probability and impact, and facilitates feedback for mitigation.
Roles within Information Security may cover one or more areas of specialty, e.g. Identity & Access Management (which may include, for example, authentication; access management & control; recertification etc.); Information Security (IS) Operations (which may for example include, cyber threat operations; cyber forensics, protection against data leakage etc.) and IS Technology (which may include IS architecture, IS engineering, cryptographic services etc.)

Your key responsibilities

• Responsible for supporting all CSO Remediations across a portfolio of applications or infrastructure components.
• Responsible for handling exceptions by analysing vulnerabilities, responses from application or infrastructure owners and identifying potential risks
• Handle requests from internal customers, CH colleagues and automated reporting using existing knowledge articles as well as other published resources to close them.
• Responsible for involving additional support when the case cannot be closed using existing knowledge articles and resources.
• Responsible for building close working relationships with their customers and, under the direction of the CH Business Engagement Managers, they are responsible for actively engaging their business stakeholders to address vulnerabilities and improve compliance
• Supports the development of an environment where people development is the number one priority. Coaches others in the organisation, as appropriate
• Actively supports the business strategy, plans and values, contributing to the achievement of a high performance culture
• Takes ownership for own career management, seeking opportunities for continuous development of personal capability and improved performance contribution
• Acts as a role model for new employees, providing help and support to facilitate early integration and assimilation of their new environment

Your skills and experience

• Must have experience and knowledge in penetration testing or vulnerability management or vulnerability remediation support
• Information Security controls and/or IT Risk framework knowledge desirable
• Basic level of understanding of Intruder techniques, software exploitation methods, understanding of security auditing practices.
• Knowledge and experience Google Cloud will be an added advantage
• Must be a good communicator, who has a capacity for learning a broad range of subjects and has the situational awareness to adjust communications styles.
• Must be able to read documented knowledgebase articles and adapt them to the customers situation, calling on additional support where needed.
• Must be organised and diligent.
• Professional certification such as CEH, Security+, Professional Cloud Security Engineer etc preferred
• Good analytical reasoning and problem solving skills
• Academic Degree or Diploma-level education (or equivalent) in Science or engineering technology
• Knowledge of Word, Excel, PowerPoint
• Effective communication skills are a must, as are English language skills to business standard