About This Role
This role is for an Information Security Analyst focused on Governance, Risk, and Compliance (GRC) within the technology sector. It involves coordinating assessments, identifying security risks, and ensuring compliance with established procedures. The position suits an analyst with experience in technology risk management and a proactive approach to maintaining security standards.
Responsibilities
- Coordinate with technology factory teams for assessment as per BAU process
- Work with Technology Asset Owners (TAOs) to assess and implement relevant BAU process for Control Factory Candidates
- Perform assessments to determine security risks/non-compliance as per the SOP manuals
- Work with the team concerned and follow through remediation
- Track and report progress
- Perform periodic assessments to ensure compliance proactively
- Communicate results to stakeholders
- Analyze deviations and prepare remediation plans according to documented procedures
- Understand controls, develop inventory, and assess applications against controls
- Work with stakeholders in remediation activities
- Manage JIRA workflow tickets for BAU process
- Prepare and maintain knowledge base in Confluence/Collaborate
- Identify areas of automation/innovation and efficiencies to enhance BAU operation and stakeholder experience
Requirements
- Minimum 5-10 years of relevant industry experience in any technology risk management (TRM), IT audit, and/or cyber/information security functions
- Ability to understand and operate documented processes for IT compliance, audit, and regulatory requests
- Know-how and understanding in one or more areas of technology risk management principles, internal control concepts, cyber/information security controls, and industry frameworks
- Functional knowledge of operating systems (Windows/Unix), databases, networks, and components like system IDs, system resources, firewalls, LDAP, AD, Cloud
- Functional knowledge of applications (authentication, authorization, interfaces, APIs), logging, and monitoring
- Functional knowledge of application design and architecture
- Functional knowledge of application criticality, availability, and data classification
- Able to learn new skills with training and self-study
- Degree or diploma in IT or technology stream
- Any industry recognized IT certifications (Microsoft, Cloud, IT Security etc)
Nice to have:
- Any relevant experience in Project Management
Important Details
- Tools: JIRA, Confluence, ServiceNow, Archer, MS Office (Word/Excel/Visio), PDF, PowerPoint
