Information Security Engineer & Cyber Risk Analyst

About the role

This position safeguards the organisation's information assets by designing, implementing and maintaining enterprise security controls while ensuring compliance with relevant regulations and standards. You will work closely with IT, cloud, development, legal and risk teams to align security strategies with business objectives.

Key responsibilities

• Identify, assess and remediate security risks across on‑premise and cloud environments.
• Conduct vulnerability assessments, security risk analyses and coordinate penetration testing.
• Support incident response, threat monitoring and AI‑powered detection.
• Develop and maintain security policies, standards and compliance reporting.
• Perform third‑party risk assessments and oversee cloud security governance.
• Drive security automation, IAM, EDR, DLP and CASB initiatives.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field (Master’s preferred).
• Proven experience in roles such as Information Security Engineer, Security Compliance Analyst or Cyber Risk Analyst.
• Strong understanding of GRC, IAM, network and endpoint security, and incident response.

Required skills

• Microsoft Defender, CrowdStrike, Palo Alto Networks, Fortinet, Cisco Secure.
• Splunk, Microsoft Sentinel, IBM QRadar, Tenable, Qualys, Rapid7.
• Okta, CyberArk, SailPoint.
• AWS Security Hub, Microsoft Azure Security Center, Google Cloud Security Command Center.
• SIEM, SOAR, IAM, EDR, DLP, CASB platforms.

What we offer

• Opportunity to shape the security posture of a fast‑growing organisation.
• Collaboration with cross‑functional teams and exposure to cutting‑edge technologies.