Information Technology Analyst

Role - IT Analyst Please find the JD. Purpose of the Role The Senior Manager, Security Analyst, is responsible for overseeing and enhancing the organization’s security posture by managing security policies, tools, and response mechanisms. This role requires deep technical expertise, strategic planning, and leadership skills to safeguard the organization against evolving security threats. Role & Responsibilities Security Strategy & Leadership : Develop, implement, and oversee the organization's comprehensive security strategy. Lead and mentor a team of security analysts to ensure high performance and professional growth. Act as a trusted advisor to executive leadership on security matters and emerging threats. Threat Monitoring & Incident Response : Oversee the detection and analysis of cybersecurity threats and vulnerabilities. Manage the incident response process, ensuring timely identification, mitigation, and reporting of security incidents. Collaborate with cross-functional teams to perform root cause analyses and implement corrective actions. Risk Management & Compliance : Conduct regular risk assessments and audits to ensure compliance with industry regulations and standards (e.g., ISO 27001, GDPR, SOC 2). Implement and enforce policies, procedures, and controls to minimize risks and maintain compliance. Collaborate with legal and compliance teams to address security-related legal or regulatory requirements. Tools & Technology Management : Evaluate, recommend, and implement security tools and technologies to strengthen defenses. Oversee the configuration, maintenance, and monitoring of security infrastructure, including firewalls, SIEM systems, and endpoint protection tools. Ensure the security of cloud platforms, networks, and on-premises systems. Training & Awareness: Develop and lead employee security awareness programs to promote a culture of security. Stay current on emerging security trends and technologies to anticipate potential risks. Vendor & Stakeholder Management: Liaise with external vendors, consultants, and auditors to enhance security measures. Build strong relationships with internal stakeholders to align security initiatives with business objectives. Qualifications & Skills Minimum 10 years of experience in information security, with at least 6 years in a leadership or managerial role. Proven track record in designing and implementing security programs. Strong understanding of security frameworks, standards, and protocols (e.g., NIST, OWASP, ISO). Expertise in incident response, penetration testing, and vulnerability assessments. Knowledge of cloud security (e.g., AWS, Azure, Google Cloud). Strong analytical, communication, and project management skills. Good to have: Certifications (Preferred): Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Ethical Hacker (CEH) GIAC Security Essentials (GSEC) Show more Show less