Information Security Analyst

Information Security Analyst

About Our Client

The company is a prominent financial institution, playing a significant role in the Maltese market and part of a diverse multinational group. The business offers comprehensive lending and savings solutions to both personal and business customers through its extensive network of retail branches across the Maltese Islands.

Role Overview

The Information Security Analyst is responsible for monitoring the company's systems and networks for security events, vulnerabilities, and incidents using various systems, services, and tools. This role includes conducting security risk assessments of internal systems and third-party services, analyzing security threats, and providing expert advice on risk mitigation. The analyst will also serve as a point of contact for security event reporting and champion information security awareness within the company.

Key Responsibilities

Security monitoring: Analyse and respond to security threats from various security platforms and technologies.

Threat assessment: Conduct research and evaluate cyber intelligence to develop in-depth assessments of threats to the organisations networks, systems, users, and data.

Incident reporting: Serve as a liaison and a point of contact for information security event reporting.

Technical assessments: Create technical assessments and cyber threat profiles based on innovative collection and research.

Procedural development: Develop and maintain analytical procedures to meet changing requirements and enable more strategic detections.

Trend awareness: Stay abreast of innovative business and technology trends in IT security, risk, and controls.

Risk management: Ensure effective execution of the risk management framework by managing relationships with key stakeholders.

Regulatory compliance: Identify regulatory risks and ensure they are appropriately mitigated.

Security advocacy: Champion information security within the company, providing training and increasing awareness.

Risk reporting: Develop, track, and report on Key Risk Indicators (KRIs) for information security.

Control testing: Perform process-level walkthroughs, control testing, and assess IT risks and controls.

Communication: Effectively communicate key risks, findings, and recommendations for improvement with stakeholders.

Ad hoc duties: Perform any other ad hoc duties as assigned.

Qualifications, Skills and Attributes

Communication skills: Fluent in English with strong oral and written communication skills.

Team interaction: Comfortable conversing with teams of varied backgrounds and purposes.

Guidance reception: Receptive to management guidance and able to effectively communicate results.

Organisation: Highly organised with an ability to prioritise and multi-task.

Problem-solving: Excellent problem-solving skills, productive both independently and as part of a team.

Attention to detail: Detail-oriented with the ability to juggle multiple issues efficiently and effectively.

Analytical thinking: Able to think outside the box to analyse security issues.

Educational background: Minimum of a bachelor's degree in Computer Science, Cyber Security, Information Technology, or a similar field.

Experience: Minimum of 4 years experience in IT, with at least 2 years in Information Security.

Technical expertise: Experience with Linux, Windows, and Network Operating Systems, and practical expertise with EDR, SIEM, and SOAR solutions.

Policy development: Experience developing security policies, standards, and guidelines.

Security frameworks: Knowledge of security control frameworks such as CIS, OWASP, COBIT.

Programming skills: Proficient in programming and scripting (Python, Bash, PowerShell).

Standard knowledge: Good understanding of ISO27001, information risk management, and GRC practices.

Certifications: Desirable certifications include CISSP, CISM, CISA, CRISC, ISO27001 Lead Implementer, ISO27001 Lead Auditor.

Financial sector experience: Previous experience in a financial services institution is considered an asset.

What's on Offer

Personal development: Ongoing personal development opportunities.

Preferential rates: Preferential interest rates on home loans, personal loans, and home value loans.

Academic support: Comprehensive support for academic advancement with fully subsidized staff study loans.

Health insurance: Private clinic health insurance coverage, extendable to dependents.

Life insurance: Life insurance and personal accident cover.

Health benefits: Free ophthalmic examinations and private counselling sessions.

Birthday leave: Additional half-day leave for birthday celebrations.

Performance appraisals: Annual performance appraisals and salary reviews.

Wellness allowance: Receive an annual wellness allowance.

Health screenings: Complimentary mammogram screenings for female employees aged over 40 and PSA screenings for male employees aged over 40.

Flexible work: Flexible work arrangements where the role permits.

Corporate discounts: Various corporate discounts.

What Heroix Offers

• Confidentiality and Discretion: Ensure your job search is handled with utmost confidentiality and professionalism.
• CV Review: Receive candid & constructive feedback to enhance your CV.
• Interview Planning: Get personalised prep session prior to your interviews.
• Cultural Fit Assessment: Understand the company culture to ensure it's the right environment for you.
• Long term: Get the details of the role and the company so that you'll be in a position to see the move as long-term, where you establish yourself for growth and stability.
• Exclusive Opportunities: Access a broader range of job opportunities.
• Personalised Candidate Profile: Stand out with a detailed profile highlighting your strengths and skills.
• Ongoing Support and Guidance: Benefit from continuous support throughout your job search process.
• Networking Opportunities: Leverage our extensive network of industry contacts for exclusive positions.
• Time Efficiency: Save time and effort with our efficient and effective recruitment strategies.
• Tailored Job Matching: Find the perfect fit with customised job matching based on your skills and career goals.
• Feedback Loop: Stay informed and engaged with regular updates and feedback on your application status.

Heroix - Rise to New Heights

Follow Heroix:

https://www.linkedin.com/company/heroix-rise-to-new-heights/

https://www.facebook.com/Heroix.eu/

DIER E.A. Licence No: 00229-2023