IT Security Analyst  

To work with the IT Security Manager to build and provide the Enterprise Security Solutions for the company.

• Perform security risk analysis and risk management, manage security penetration and vulnerability testing, manage internal audits on enterprise operations security processes, controls, and systems.
• Bring the organization's Enterprise Operations Security risks under explicit management control through the Information Security Management System by establishing an enterprise security stance through policy, architecture and training processes. This will include the selection of appropriate security solutions and oversight of any vulnerability audits and assessments.
• Minimize or eliminate risk by developing policies and procedures that encourage secure working and protect data.
• Setup procedures and automated processes to monitor the status of computers and networks for unusual patterns of behavior.
• Implementation of necessary Enterprise Operations Security Policies, standards, procedures, and guidelines, in conjunction with Security Committee.
• Assess the operational efficiency, compliance with industry standards, and effectiveness of the organization's security design and strategies.
• Perform compliance monitoring and improvement activities to ensure compliance both with internal security policies and applicable laws and regulations.
• Perform suitable information security awareness, training, and educational activities
• Perform Enterprise Operations Security risk assessments and controls selection activities.
• Develop global information security services that will provide the security functionality required to protect the organization's information assets against unauthorized disclosure, modification, and destruction.
• Develop information security strategies that can adapt to the organization's diverse and changing technological needs.
• Work with Business and Business Process owners to educate them on threats, vulnerabilities, and available risk mitigation strategies.
• Produce high-quality process documentation that communicate security steps
• Help the architecture function maintain the Information Security Management System (ISMS), associated policies and supporting standards.
• On an ongoing basis, manage day to day security requests and operations
• Manage all identity and access control processes for all internal systems (ITIL v3 Access Management process owner)
• Manage identity and access for 3rd party collaborators, business partners, and freelancers.
• Report on key metrics across security function
• Manage user permissions and segregation of duties
• Review and document perimeter security functions
• Monitor and contribute to the management of all outsourced security services
• Monitor and escalate detected security incidents
• Help review root cause analysis of security incidents and recommend improvements
• To use consulting and analytic skills and information gathering techniques to investigate logical and physical solution architecture that span corporate IT systems
• Work on cross-functional Enterprise Operations Security projects
• Promote security awareness and education.

• Candidate must possess at least a Bachelor's/College Degree, Protective Services & Management or equivalent.
• At least 1 year(s) of working experience in the related field is required for this position.
• Preferably 1-4 Yrs Experienced Employees specializing in Security/Protective Services or equivalent.
• Full-Time position(s) available.