IT Security Analyst

Job Responsibilities:

• Establish a framework for risk management, which involves identifying particular events or circumstances (threats and opportunities), assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring process.
• Perform analysis of technology risk metrics, then formulate and provide independent reporting on the company's technology and cyber risk posture.
• Lead and drive the establishment of IT security activities and initiatives as part of the company's IT Security programme; inclusive of security awareness, training, and incident
• response.
• Develop and maintain appropriate security documentation for applications, infrastructure, and systems.
• Manage and monitor Cybersecurity incidents, logs, alerts & events to ensure the cybersecurity risk is mitigated.
• Assist and support the Assistant Manager, Information Technology to implement and to ensure compliance with all the policies relating to Information Technology.
• Establish and maintain materials and equipment storage.
• Specify items required and obtain quotations as necessary.
• Maintain good relationships with vendors.
• Prepare reports and provide accurate information as and when required by the Management.
• Assist management in ensuring compliance of all OHS legal and procedural requirements by various stakeholders, including through the following:
• Execute OHS requirements in respective work areas.
• Maintain cleanliness, good housekeeping, and overall safe work environment; and
• Undertake immediate correction and improvement action on any non-compliance practices, and report all OHS related injuries, ill health or incidents to the OHS section.
• Provide IT-related services.
• Perform general troubleshooting equipment; and work effectively and with flexibility as a member of the technical team, providing prompt input, advice and assistance as required.
• Any other duties as and when required and directed by the Assistant Manager (Infrastructure); and/or IT Manager; or by authorized personnel.

Job Requirements:

• At least three (3) years of relevant working experience in two of the following domains: deployment, configuration, support, cybersecurity, network security, and project management in a medium-to-large enterprise with a proven record of providing quality service and leadership.
• Experience in assisting or performing risk assessments or Incident response and management.
• Experience in running small/medium size IT projects in a corporate environment.
• Familiar with current security technologies and keen interest in learning within security domain.
• Familiar with support and managing Endpoint Detection and Responses (EDR/XDR), Email security gateway, Firewall, IPS,VPN,DLP,MFA, etc.
• Handle, Validate and Investigate Security Events (Intrusions/Malicious Activity/Security Events)
• Ability to perform the tasks assigned under pressure and short notice. Ready to work outside of normal office hours when required.
• Ability to handle confidential and sensitive information responsibly.
• Self-motivated, demonstrating a high level of initiative, assertiveness, versatility and flexibility.
• Experience in responding to all audit enquiries pertaining to IT security matters.
• Demonstrates up-to-date knowledge of the current cyber security trends, threats, solutions and tools.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, and common security elements.