Cyber Security & Risk Analyst

Job Purpose :

Support IT and cybersecurity risk management activities while strengthening organisational cyber resilience through risk assessments, framework compliance, and BCP/DR readiness.

Job Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Risk Management, or related field; relevant certifications (CISSP, CISM, CISA, CRISC, ISO 27001, Security+) are an advantage.
• 2- 3 years working experiences in cybersecurity risk management.
• Knowledge of cybersecurity frameworks and standards (ISO/IEC 27001, NIST CSF, COBIT) and core risk management principles.
• Experience with cybersecurity and GRC areas such as risk assessments, control testing, incident and vulnerability management; exposure to tools (e.g. SIEM, EDR/XDR, GRC platforms) is a plus.
• Strong analytical, documentation, and communication skills, with the ability to translate technical risks into business impact and work effectively with stakeholders.

Key Responsibilities:

• Cyber Risk Operations

Support cybersecurity controls, enterprise risk assessments, risk monitoring, and IT risk register management aligned with industry frameworks.

• Cybersecurity Operations Support

Support incident response, vulnerability management, SOC activities, security control validation, and user access reviews.

• Governance, Compliance & Assurance

Maintain cybersecurity policies, support audits and regulatory compliance, conduct control reviews, and drive security awareness initiatives.

• Reporting & Continuous Improvement

Deliver cybersecurity reporting and dashboards, support governance forums, analyse risk trends, improve GRC processes, and support BCP/DR and resilience activities.