Information Security Analyst

Job Overview

As an Information Security Analyst, you will play a crucial role in maintaining and enhancing the security posture of our organization. You will be part of a dynamic team responsible for Governance, Risk, and Compliance (GRC), Security Operations Center (SOC) activities, and Vulnerability Assessment and Penetration Testing (VAPT).

Key Responsibilities

Governance, Risk, and Compliance (GRC)

• Assist in developing, implementing, and maintaining security policies, procedures, and standards
• Conduct risk assessments and provide recommendations for risk mitigation
• Ensure compliance with regulatory requirements and industry standards (e.g., ISO 27001, GDPR)
• Support internal and external audits and assessments

Security Operations Center (SOC)

• Monitor security alerts and incidents using SIEM and other security tools
• Perform initial analysis and triage of security incidents
• Collaborate with senior SOC analysts to respond to and resolve incidents
• Maintain and update incident response documentation

Vulnerability Assessment and Penetration Testing (VAPT)

• Conduct regular vulnerability assessments and penetration tests on network and application systems
• Identify, document, and report security vulnerabilities with recommended remediation steps
• Assist in the implementation of security measures to address identified vulnerabilities
• Stay updated with the latest security threats, vulnerabilities, and mitigation techniques

Education

• Bachelor's degree in Computer Science, Information Security, or related field

Experience

• Mid-Level resources with 2 to 3 years of proven experience in Information Security

Skills

• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001)
• Experience with security tools such as SIEM, vulnerability scanners, and penetration testing tools is advantageous
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Ability to work collaboratively in a team environment

Preferred Certifications

• CompTIA Security+
• Certified Ethical Hacker (CEH)

What We Offer

• Competitive salary and benefits package
• Opportunity for professional growth and development
• Collaborative and supportive work environment
• Access to the latest security tools and technologies