IT Security Analyst

Responsibilities:

• Act as the primary liaison between the organization and external PCI DSS and ISO27001 assessors and auditors.
  
• Develop and deliver security awareness training programs on a quarterly, annual, and on-demand basis.
  
• Create and distribute security awareness materials, such as presentations, posters, and email alerts.
  
• Measure the effectiveness of security awareness programs through surveys, tests, and other metrics.
  
• Define and enforce security requirements for applications in development.
  
• Collaborate with development teams to integrate security best practices into the software development lifecycle.
  
• Monitor and ensure compliance with security requirements throughout the development process.
  
• Participate in the delivery of cybersecurity operations through vulnerability and threat identification, incident detection and response, forensic investigations, and patch and vulnerability management.
• Engage with infrastructure and applications teams in mitigation and remediation efforts.
  
• Maintain key metrics that are indicative of the security posture of the infrastructure.
  
• Keep abreast of threat intelligence feeds to stay abreast of industry reports and emerging threat that may affect.
  
• Produce Executive Dashboard Security reporting showing actionable insights from IT Security monitoring tools
  
• Engage with other IT units, where applicable, to establish and enforce security best practices, protection objectives, and process improvements.

Requirements:

• A minimum of 3 years of experience
• A minimum of a degree in a related field