Information Security Analyst

The Tech Stack Deep-Dive
Must-Haves:

• Security Ops & Analysis: IT security log analysis, malware resolution, and incident assessment/remediation.
• Vulnerability & Testing: Vulnerability scanning, annual penetration testing coordination, and risk assessments.
• Standards & Compliance: ISO27001 ISMS management, Statement of Applicability, risk treatment plans, and internal/external audit management.
• Qualifications: Diploma / NQF Level 6 in Computer Science or Information Systems. Up to 3 years of hands-on IT Security experience.

Nice-to-Haves:

• Cloud & Security Tech: Microsoft Azure Security Technologies (AZ-500 certification).
• Frameworks & Best Practices: DevSecOps lifecycle integration, ISO27001 ISMS certification, and IT Security Governance experience.

Key Responsibilities

• Proactive Security Ops: Monitor log activity, resolve identified malware, conduct risk assessments, and support end-to-end incident response investigations.
• Vulnerability & Threat Management: Lead annual penetration testing and vulnerability scanning, analyze internal/external cyber threats, and enforce mitigation strategies.
• Governance & Audit Leadership: Maintain ISO27001 compliance documentation, complete client/supplier security audits, and manage role-based access control (RBAC) life cycles.
• DevSecOps & Tech Advisory: Integrate security practices into DevSecOps workflows, evaluate new security tools, and deliver security awareness training across the firm.

Why Join Us?

• High-Impact Autonomy: Take full ownership of risk remediation and technology evaluations while directly advising business units on security best practices.
• Modern Security Infrastructure: Work with modern cloud environments (Azure) and stay on the cutting edge of cyber threat analysis and DevSecOps practices.
• Continuous Growth: Expand your expertise with access to learning and development initiatives while leading enterprise-level ISO27001 audits.