Information Security Analyst I

Job Summary:

Implements information security and compliance controls; performs security incident management; documents assessments, processes and procedures; organizes and manages intranet site, communication, training and guidelines; support country offices; and, coordinates and serves as the primary point of contact for internal and external audits.

Accountabilities:

• Researches information security issues and proposes solutions to address vulnerabilities.  

• Oversees the security awareness program, coordinating enterprise-wide and country office campaigns. Analyzes outcomes, prepares executive reports for the Board of Directors, and delivers security recommendations informed by the assessment findings. 

• Assists in the evaluation and selection of security technologies and solutions to enhance the effectiveness of the security program. 

• Stays abreast of emerging threats, vulnerabilities, and industry best practices to continuously improve the security posture of the organization. 

• Extends support to the data-centric security program as required, assisting in its development, implementation, and maintenance of policies and procedures. 

• Engages with vendors to review products and services, facilitating communication to determine optimal solutions aligned with security and compliance requirements. 

• Monitors development within ISS groups to ensure compliance with established policies, procedures and controls.  

• Performs Security Incident Management.  

• Develops information security awareness training, guidelines and communication. Sends company wide emails with updates on phishing awareness.

• Documents events, processes, and procedures.  

• Manages an intranet site for collaboration and dissemination of information produced.  

Applied Knowledge & Skills:

• Thorough understanding of information security and assurance concepts and industry trends.

• Working knowledge with the use and application of information systems.

• Strong technical writing and problem solving skills.

• Excellent quantitative and analytical skills.  

• Excellent oral and written communication skills.

• Ability to communicate technical information clearly and concisely to non-technical users.

• Ability to work independently with initiative to manage high volume work flow.

• Ability to lead and manage projects independently and work well with others on a team.

Supervision Given/Received:

• Has no supervisory responsibility.

• Identifies and promotes security and compliance among the organization and remains current on all major system enhancements.

• Develops and recommends solutions and process improvements to management.

Education:

• Bachelor's Degree or its International Equivalent.

Experience:

• Typically requires 3+ years of experience with information security, compliance and Information Technology.

• Articulate, professional and able to communicate in a clear, positive manner with clients, partners and staff.

• Must be able to read, write and speak fluent English; fluent in host country language as required.

Typical Physical Demands: 

• Typical office environment. Ability to sit and stand for extended periods of time; ability to lift …