Cybersecurity Analyst

Job Purpose

A Security Analyst typically involves safeguarding CGC's information systems and computer networks from cyber threats and security breaches. This includes monitoring networks, investigating security incidents, implementing security measures, and staying updated on the latest security trends and technologies. Assess vulnerabilities and recommend security enhancements.

ACCOUNTIBILITIES

• Install software like firewalls and essential data encryption programs to safeguard the organization’s vital data
• Monitoring security systems access, identity, and access management, including monitoring for abuse of permissions by authorized system users, and analyzing potential threats.
• Monitor and respond to common cyber threats such as 'phishing' emails, 'pharming' activity, malware, and ransomware
• Document the security breaches and measure the damage caused.
• Generate incident reports for both technical and non-technical staff and stakeholders
• Conducting security assessments through vulnerability testing and risk analysis.
• Use advanced analytic tools to determine emerging threat patterns and vulnerabilities
• Performing both internal and external security audits
• Analyzing security breaches to identify the root cause
• Continuously updating CGC’s incident response and disaster recovery plans
• Verifying the security of third-party vendors and collaborating with them to meet security requirements.
• Monitor for attacks, intrusions, and unusual, unauthorized, or illegal activity
• Keep up to date with the latest security and technology developments
• Implementing both internal and external security audits.
• Maintain an information security risk register and assist with internal and external audits relating to information security.
• Implement penetration testing.
• Identify potential weaknesses and implement measures, such as firewalls and encryption.
• Investigate security alerts and provide incident response using incident handling methodologies and best practices.
• Record all findings, actions taken, and lessons learned following an incident to strengthen future responses
• Test and evaluate security products and check suppliers’ certification, compliance and accreditation
• Give advice and guidance to staff on issues such as spam and unwanted or malicious emails.
• Design new security systems or upgrade existing ones
• Research/evaluate emerging cyber security threats and vulnerabilities and ways to manage them
• Review and improve security processes
• Promote a culture of security amongst colleagues and other stakeholders and support wider security initiatives

Position Requirements

• Bachelor of computer science, information technology, systems engineering, or computer science.
• CISSP, or CompTIA Security+, Certified Ethical Hacker (CEH) or (CPENT)MBA “optional”
• From 2 to 4 years of experience.