Job Summary:
The Security Analyst will be responsible for supporting the organization's security initiatives, with a focus on achieving ISO 27001 certification and securing cloud infrastructure (AWS and GCP). This role is suitable for candidates with an Information Security degree, including recent graduates who are ready to apply their academic knowledge in a real-world fintech environment. The analyst will assist with risk assessments, incident response, and compliance efforts.
Key Responsibilities:
ISO 27001 Support:
- Assist in developing and maintaining the Information Security Management System (ISMS).
- Support the preparation of documentation for ISO 27001 audits and certification processes.
Cloud Security (AWS/GCP):
- Help secure AWS and GCP environments, learning best practices for access control, encryption, and monitoring.
- Participate in regular cloud security assessments and implement necessary security controls.
Risk Assessment and Management:
- Conduct security risk assessments and help implement risk mitigation strategies.
- Support the creation and maintenance of a risk register.
Compliance and Regulatory Support:
- Ensure compliance with relevant fintech regulations, including GDPR, AML, and PCI-DSS.
- Assist in preparing for and conducting internal and external security audits.
Incident Response:
- Monitor cloud environments and systems for security threats.
- Assist with incident response, investigating and resolving security incidents in a timely manner.
Qualifications:
Education:
- BSc/MSc in Information Security, Cybersecurity, or a related field.
- Recent graduates with relevant academic experience are encouraged to apply.
Skills:
- Knowledge of cloud platforms (AWS, GCP) and basic understanding of security frameworks (ISO 27001).
- Strong attention to detail, with good analytical and problem-solving skills.
- Willingness to learn and adapt in a fast-paced fintech environment.
Preferred Skills:
- Familiarity with security tools (e.g., SIEM, IDS/IPS).
- Knowledge of fintech regulations and best practices for cloud security.
