Security Analyst

Job Description : Security Analyst

Safeguarding Digital Assets, Ensuring Compliance, and Promoting Security Awareness

Role Overview :

The Security Analyst is responsible for protecting organisational information systems and data assets. The role involves coordinating audits, assessing and managing risks, monitoring access controls, and supporting compliance initiatives. The Security Analyst will work closely with IT, compliance, and audit teams to maintain robust security practices and respond effectively to security incidents.

Key Responsibilities

• Coordinate internal and external audits and facilitate timely resolution of audit findings.
• Conduct regular risk assessments of applications, networks, and systems; recommend mitigation strategies.
• Review and update security policies and procedures to align with regulatory and organisational standards.
• Hands-on experience in Security Operations Centre (SOC) environments, demonstrating the ability to coordinate and follow up on SOC activities and incident escalations.
• Proficiency in Vulnerability Assessment and Penetration Testing (VAPT) coordination, including scheduling, tracking remediation, and collaborating with relevant teams to ensure timely closure of findings.
• Strong analytical skills for interpreting security data, generating actionable insights, and supporting root cause analysis of incidents.
• Monitor and analyse access controls to prevent unauthorised activities.
• Perform vulnerability assessments and manage remediation processes.
• Respond to security incidents, conduct investigations, and document incident reports.
• Oversee web application security testing and ensure adherence to secure coding practices.
• Support compliance management with respect to relevant standards and regulations.
• Deliver security awareness training and promote a culture of cybersecurity across the organisation.
• Review and report security violations, recommending corrective actions.
• Assist with the implementation and monitoring of encryption, cloud security controls, and data protection measures.
• Provide risk and compliance support to IT and business teams as required.
• Participate in security testing of applications, networks, and cloud environments.
• Stay updated on emerging threats and evolving security technologies.

Required Skills and Qualifications

Desired Experience