Cyber Security IT Assurance Senior Analyst

Role Overview

Cyber Security IT Assurance Senior Analyst at ENOC. The role conducts IT assurance activities to protect organizational information assets and critical infrastructure through technical cyber security assessments and verification of security control effectiveness.

Role Purpose

Perform IT assurance activities and technical cyber security assessments to identify gaps, validate security controls, and verify the effectiveness of security projects and implementations across the organization's technology environment.

Key Responsibilities

Operational Assessment & Analysis

• Conduct IT cyber security analysis of the technology environment to identify gaps and recommend solutions for improvement.
• Conduct IT architecture assessments from a technical security point of view.
• Conduct evaluation and assessment of available IT tools and countermeasures to remedy detected vulnerabilities and recommend best solutions and practices.
• Conduct reviews and validations of IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable.
• Perform cyber security review for systems development or acquisition projects related to IT environments.
• Validate and verify IT systems security requirements definitions, analysis, and established system security designs.
• Conduct periodic cyber security assessments of existing IT controls and the technology landscape within the organization, including vulnerability scanning, penetration testing, and Red Teaming exercises.
• Conduct configuration review of IT cyber security equipment.
• Assess and validate security configurations and access to security infrastructure tools, including firewalls, IPSs, passive monitoring solutions, and anti-malware/endpoint protection systems.
• Conduct secure security code review and dynamic security testing for applications related to IT environment.
• Conduct IT cyber threat modelling of services and applications that tie to the risk and data classification associated with the service or application.

Stakeholder Management

• Build strong relationships and work collaboratively with internal and external stakeholders.

Information Security Governance

• Comply with all applicable information security policies, standards, and procedures.
• Classify and protect information assets in accordance with the Data Classification Standard.
• Participate in mandatory information security awareness and training programs.
• Support information security initiatives and activities within the organization.
• Consider information security requirements when managing changes involving information assets.
• Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.
• Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Qualifications & Experience

• Bachelor's degree in Computer Science, Engineering, or Business field, or equivalent Diploma with additional relevant experience.
• MBA or Master's degree in Computer Science, Engineering, or Information Security (preferable).
• Professional certification such as CISSP, CISM, OSCP, CEH, CISA, or GSEC (required).
• 6+ years of Information Technology experience.
• 3+ years of relevant working experience.
• Working experience in cyber security assurance.
• Working experience in cyber security assessments.
• Working experience in cyber security architecture review.
• Working experience in multiple industries such as Oil & Gas, Energy, Utilities, Retail, or Government (preferable).