Information Security Analyst

at  InfoSum

InfoSum is the world’s leading data collaboration platform, providing solutions to the world’s largest enterprises to allow collaboration across data sources and deliver richer customer experiences that prioritize consumer privacy. Our vision is to unlock data’s limitless potential, by enabling the world’s data to be connected but never shared. As a people-first organization, we can offer you the personal and professional flexibility needed to get the job done, grow with us, and help challenge the status quo. If you want to work with a business that encourages collaboration, and champions the idea that the sum is greater than its parts, then we want to hear from you.

REQUIREMENTS

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Proven experience as an Information Security Analyst or similar role.
• Strong knowledge of security frameworks and standards (e.g., ISO 27001, NIST).
• Proficiency in security tools and technologies (e.g., SIEM, IDS/IPS, firewalls).
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Relevant certifications (AWS, CEH) are a plus.

The Information Security Analyst will be involved in monitoring, identifying, and responding to security incidents, conducting security audits, and implementing remediation measures to protect the organisation’s information systems. This role requires a proactive approach to security, strong analytical skills, and the ability to work collaboratively with various departments.
Key Responsibilities:

1. Security Incidents:

• Monitor and analyze security alerts and incidents to identify potential threats.
• Investigate security breaches and incidents, determining the root cause and impact
• Coordinate with IT and other departments to contain and mitigate security incidents.
• Document and report security incidents, providing detailed analysis and recommendations.

1. Monitoring and Remediation:

• Continuously monitor network traffic, system logs, and security tools for unusual activity.
• Implement and maintain security tools and technologies to enhance threat detection and response.
• Ticket and execute remediation plans to address vulnerabilities and security gaps.
• Conduct regular vulnerability assessments and penetration testing.

1. Security Audits:

• Conduct internal security audits to ensure compliance with security policies and standards.
• Collaborate with external auditors during third-party security assessments.
• Prepare audit reports, highlighting findings and recommending corrective actions.
• Track and ensure the implementation of audit recommendations