IT Security Analyst

Requirements:

• Diploma or NQF Level 6 qualification in Computer Science, Information Systems, Information Technology, or a related field.

• Up to 3 years of relevant experience in IT security or information security.

• Essential experience with ISO 27001 certification, consulting, and advisory activities.

• Preferred ISO 27001 Information Security Management Systems (ISMS) certification.

• Preferred Microsoft Azure Security Technologies AZ-500 certification.

• Experience in IT security operational execution, including security monitoring, incident response, and vulnerability management.

• Strong analytical, problem-solving, judgment, communication, integrity, and advisory capabilities.

Responsibilities:

• Conduct IT security log analysis and monitor security events for potential threats and incidents.

• Collaborate with internal and external stakeholders to investigate and resolve identified malware and security incidents.

• Maintain security incident records, perform initial assessments, and support incident response investigations and remediation.

• Lead annual vulnerability scanning and penetration testing activities.

• Analyse information security risks and recommend appropriate solutions to protect information against unauthorised access, modification, destruction, or disclosure.

• Log and manage information security risks, track remediation measures, provide stakeholder updates, and escalate critical risks.

• Conduct periodic risk and vulnerability assessments, document findings, and track remediation activities.

• Coordinate and support internal and external ISO 27001 audits, including documentation preparation, scheduling, and follow-up on findings.

• Develop, maintain, and update ISO 27001 compliance documentation, including the Statement of Applicability, risk treatment plans, asset inventories, and ISMS documentation.

• Monitor compliance with ISO 27001 and other relevant information security standards, reporting nonconformities and supporting corrective actions.

• Administer information security governance documentation, policies, access controls, security audits, and service-provider compliance assessments.

• Provide information security advice to business units and assist with the development and delivery of security awareness training.

• Evaluate and test new technologies, security controls, policies, procedures, licensing, and project capabilities to ensure security requirements are met.

• Analyse internal and external cyber threats, recommend infrastructure improvements, maintain awareness of emerging threats and technologies, and ensure security throughout the DevSecOps lifecycle.