Security Analyst

This job has now expired please search on the home page to find live IT Jobs.

Job purpose:

* Take the lead on the coordination of remediation activities across the organization

* Develop and implement new security processes related to identified weaknesses

* Take the lead on the organising and coordination of evidence gathering to support remediation or compliance to security standards

* Tracking and reporting on the progress of addressing issues raised in internal and external audits.

* Liaise with regional and global colleagues on audit remediation activities

Key responsibilities - accountabilities

* Security SME and Technical advice

* Responsible for providing specialist advice and expertise to the Regional Information Security head, Deputy and technical teams.

* Support the Regional Information Security Head in conducting reviews of regions' current security posture and compliance to AXA Information Security Policies and compliance.

* Assist the Regional Information Security Head in developing status reports and presentations for ATS central IS stakeholders for the region.

* Engage with Regional Information Security Head to disseminate all key Information Security communications regionally.

* Assist Regional Information Security Head to provide regular updates to ATS CISO.

* Provide input into regional security assurance activities and support central assurance initiatives.

* Configuration and regulatory compliance

* Act as regional lead on the coordination and implementation of minimal baseline security controls in line with internal and external security standards.

* Coordinate on the timely delivery of security compliance reports into the central reporting framework

* Act as the regional lead on the coordination and implementation of audit remediation and the new processes across the organisation and organising the gathering of evidence to support assessments.

* Working with technical support teams to coordinate the effective implementation of security remediation activities relating to audit, vulnerability management and configuration compliance across infrastructure platforms

Qualifications

Certification:

* Information Security and/or Information Technology industry certification (CISSP, CISM, ISO 27001 or equivalent) strongly preferred

* Member of IISP or have the qualification, skills and experience to become a member

Overall work experience in the field

* Experience in information security > 4 years

* Experience in regulatory attestation processes and evidence gathering (essential)

* Proven experience in information security governance, controls and/or audit issues tracking

Skills / abilities

* Cross cultural sensitivity, flexibility

* Organized with a proven ability to prioritize workload, meet deadlines, and utilize time effectively

* Good interpersonal and communication skills, works effectively as a team player

* Good analytical skills