Information Security Analyst

Technology

Work Mode: Hybrid(2 days WFO)

Role: Information Security Analyst

JD:

Professional

• Excellent knowledge about NIST cyber security framework, ISO27001 security domains, processes and controls
• Certifications are preferred but not mandatory - CTPRP ( Certified Third Party Risk Professional) / CISA / CISM / CISSP / ISO 27001 Lead Auditor / CRISC

Person Specification:

Experience

• Minimum 2 years Specialist-Level 7 / Preferred 1 year experience but not mandatory with relevant experience/ exposure in Information security / NIST cyber security framework / ISO 27001 processes and controls, infrastructure protection and information technology audit experience
• Basic knowledge and understanding about multi-platforms e.g. Experience in UNIX, Windows and IP intranet/Internet security environments including: firewalls, intrusion detection, incident response, policy writing, vulnerability testing, operating system hardening, regulatory compliance, and data classification.
• Knowledge of corporate security and network policies and procedures, and experience in a compliance management leadership role.
• Demonstrated competency in developing effective solutions to diverse and complex business problems
• Exposure linking legal and regulatory statutes with corporate policies

Knowledge

• Basic understanding of NIST cyber security framework, ISO 27002 and PCI DSS Standards
• Basic knowledge of regulatory requirements such as Sarbanes Oxley, HIPPA, GLBA etc.

Skills

• Strong partnering, communication and presentation skills
• Cross-Cultural Competence
• Professionally well spoken and written English is required. Knowledge about any additional languages like Chinese, Korean, Japanese, Spanish will be an added advantage
• Team work. Demonstrated ability to work effectively within a team environment
• Strong analytical and problem-solving skills
• Business Acumen and Customer Focus
• Ability to successfully prioritize and multi-task comfortable with change and complexity
• Demonstrated ability to deliver high quality, accurate work within tight deadlines
• Demonstrated ability to handle confidential information in an appropriate manner