Information Security Analyst

Manage Job Profile

Summary of Role

The role is responsible for enhancing security processes, implementing and supporting security technologies, ensuring operational stability and uptime, mitigating risks, and providing technical leadership and mentorship within the Information Security function. The incumbent operates independently, contributes to security innovation and transformation initiatives, and provides expert guidance on security best practices and emerging technologies.

Responsibilities

Security Operations & Technology Management

• Identify, analyze, troubleshoot, and resolve complex information security technology issues.
• Monitor and maintain information security solutions to ensure optimal performance, stability, and availability.
• Interpret and analyze security logs, management information systems (MIS), reports, and monitoring tools to identify deviations and potential threats.
• Implement, configure, support, and optimize security technologies in line with enterprise security standards.
• Oversee security environments and ensure compliance with established security standards and best practices.
• Log, review, submit, and implement low, medium, and high-risk security changes independently.
• Ensure successful implementation and post-implementation validation of security changes.
• Participate in the implementation, testing, and handover of new security products and services.

Risk Management & Governance

• Identify, assess, and mitigate information security risks across technology environments.
• Maintain compliance with information security policies, standards, procedures, and regulatory requirements.
• Create, review, and maintain security standards, processes, and procedures.
• Review project documentation to ensure security requirements and controls are adequately addressed.
• Support governance, risk, and compliance initiatives through proactive monitoring and reporting.

Stakeholder Engagement

• Build and maintain strong relationships with business stakeholders, technology teams, vendors, and security partners.
• Collaborate with stakeholders to understand security requirements and deliver fit-for-purpose solutions.
• Provide expert security advice and recommendations during projects and operational initiatives.
• Obtain stakeholder buy-in for security-related improvements, controls, and process enhancements.
• Support vendor evaluations and provide input into negotiations for security products and services.

Security Innovation & Continuous Improvement

• Participate in security-related research and development initiatives.
• Conduct Proof of Concept (PoC) and Proof of Technology (PoT) assessments for emerging security solutions.
• Introduce new industry trends, concepts, and technologies to improve the security landscape.
• Identify opportunities to improve business processes, operating models, systems, and controls.
• Contribute to organizational transformation, innovation, and business strategy initiatives.

Leadership & Knowledge Sharing

• Provide technical mentorship and guidance to Information Security Analysts, Administrators, and junior team members.
• Facilitate knowledge transfer and capability building within the security team.
• Contribute to security training curricula and development programs.
• Participate in defining career paths, competency requirements, and specialist development initiatives.
• Represent the organization at information security forums, conferences, and technical industry events.
• Present technical findings, recommendations, and industry insights to relevant stakeholders.

Operational Excellence

• Ensure accurate and timely completion of timesheets, administrative tasks, and reporting requirements.
• Support after-hours incident response and troubleshooting when required to maintain critical services.
• Ensure service delivery aligns with agreed service levels and operational objectives.
• Contribute to achieving business strategy, objectives, and organizational values.

Qualifications

• Matric and Advanced Diploma or Bachelor's Degree (NQF Level 7) in:
• Information Technology
• Computer Science
• Information Security
• Cybersecurity
• Engineering or related field

Certifications

• CISSP (Certified Information Systems Security Professional) - Mandatory
• CISM (Certified Information Security Manager) - Mandatory

Additional certifications advantageous:

• CEH
• CompTIA Security+
• GIAC Certifications
• Microsoft Security Certifications
• CCSP
• ISO 27001 Lead Implementer/Auditor

Experience

• 10 - 15 years of experience within an Information Technology environment.
• Minimum 2 years in a senior-level technical or specialist role.
• Minimum 3 - 5 years specializing in Information Security technologies.
• Experience implementing and supporting enterprise security solutions.
• Experience within a banking or financial services environment advantageous.
• Proven experience in security operations, governance, risk, and compliance.
• Experience mentoring and coaching technical teams.

Technical Competencies

Information Security

• Security Operations
• Security Architecture
• Threat Management
• Incident Management
• Vulnerability Management
• Identity and Access Management (IAM)
• Security Monitoring and Logging
• Endpoint Security
• Network Security
• Cloud Security
• Data Protection and Encryption

Governance, Risk & Compliance

• Information Security Policies & Standards
• Risk Assessment and Mitigation
• Security Auditing
• Regulatory Compliance
• Governance Frameworks

Technical Knowledge

• SIEM Platforms
• Security Monitoring Tools
• Firewalls and Network Security Technologies
• Security Analytics
• Cloud Security Platforms
• Vulnerability Assessment Tools
• Operating Systems and Infrastructure Security
• Microsoft Security Technologies
• Security Automation and Orchestration

Preferred Industry Experience

• Banking and Financial Services
• Insurance
• Telecommunications
• Large Enterprise Environments
• Regulated Industries