Information Security Analyst

Responsibilities

• Maintain relationships with customers and internal stakeholders and control owners alike;
• Manage customer questionnaires, RFx and security assessments;
• Evaluate compliance with contractual, regulatory and compliance requirements;
• Help manage the compliance and audit platform, working with system owners to implement automated evidence collection and validation to ease the customer audit lifecycle.

You have:

• 3+ years of experience in the information security or information technology field.
• Understanding of effective security controls at the systems, network, and application level and how to apply with cloud-based services.
• Experience working with AWS, GCP, or Azure.
• Experience with customer security assessments.
• Experience handling and coordinating response to customer enquiries regarding technology or security issues.
• Knowledge of industry standard security control frameworks and guidelines.

You will:

• Collaborate with the Information Security team for continuous improvements for customer contractual controls and the internal security program;
• Assess organisational risk and work with relevant stakeholders to develop risk treatment strategies and processes;
• Develop and maintain security policies and work with the wider organisation to ensure compliance;
• Support internal and external audits;
• Experience with audit and compliance platforms
• Experience managing audits and auditors
• CISSP, CISM, CISA or Comp