Information & Cyber Security Analyst

About the role

The Security Analyst supports day‑to‑day operations and continuous improvement of the cybersecurity programme. Acting as a trusted partner to technology, product and operations teams, they ensure cyber risks are identified, assessed and managed throughout development and business operations.

Key responsibilities

• Maintain information security policies, standards, risk registers and KRIs.
• Conduct cybersecurity risk assessments for new technologies, projects and third‑party services and support risk treatment.
• Support implementation and enforcement of security policies and procedures.
• Provide security reviews throughout the software development lifecycle, including design, requirements and application security assessments.
• Manage vulnerability management activities such as scanning, prioritisation, tracking, reporting and validation of findings.
• Monitor and investigate security alerts and incidents in coordination with MSSP/MDR partners, supporting incident response and recovery.
• Liaise with internal stakeholders to support regulatory compliance and audit activities.
• Deliver cybersecurity awareness, training and guidance to promote secure‑by‑design practices.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• 3–5 years of experience in cybersecurity with a strong GRC foundation; experience in the financial industry is strongly preferred.
• Strong communication, interpersonal, analytical and problem‑solving skills; ability to work independently and as part of a team.
• Hands‑on mindset, growth orientation and ability to thrive in a fast‑paced environment.

Required skills

• Experience with vulnerability scanning and penetration testing tools.
• Knowledge of security frameworks and standards such as ISO 27001, NIST, CIS and PCI‑DSS.
• Familiarity with GRC processes and risk assessment methodologies.
• Understanding of cloud and application security concepts.
• Security certifications (e.g., CISM, CEH) are a plus.