cyber security analyst

StandardAero

<div><p><b>Build an Aviation Career You&rsquo;re Proud Of
</b></p><p>At StandardAero, we use our ingenuity and know-how to find solutions for the simple to the most complex challenges in aviation. Together, we get the job done and done well. Our stability, resources, and respectful culture supports you in building a solid career with a great team you can count on day in and day out for the long term.
</p><p><b>Summary:
</b></p><p>As an IT Security Analyst position is a critical role in protecting StandardAero&rsquo;s business and technology operations. In this role you will be accountable in securing the enterprise technology and operations against an ever evolving and growing threat landscape. The role is an integral position in supporting StandardAero&rsquo;s global cyber-security defenses, providing tactical cyber security objectives and implementing the security strategy across the organization.
</p><p><b>What you&rsquo;ll do </b>:
</p><ul><li>Conduct risk and security assessments, including vulnerability analysis, threat detection, and risk mitigation across enterprise systems.
</li><li>Support internal and external security audits, including remediation activities and compliance documentation.
</li><li>Investigate, analyze, and document security incidents, performing root cause analysis and coordinating incident response and forensic support.
</li><li>Monitor, analyze, and respond to security alerts across endpoints, networks, applications, and global IT environments.
</li><li>Design, implement, administer, and maintain cybersecurity technologies (e.g., Endpoint Protection, IDS/IPS, SIEM, MFA, DLP, Email/Web Security, NAC).
</li><li>Perform proactive threat hunting by correlating activity across systems, logs, and environments to identify anomalous or malicious behavior.
</li><li>Partner with IT Operations teams to remediate vulnerabilities and strengthen system security controls.
</li><li>Research emerging cybersecurity technologies and trends; recommend enhancements to security policies, processes, and tools.
</li><li>Develop and maintain security documentation, reports, and technical standards to support governance and operational needs.
</li>Manage multiple priorities and projects with strong analytical, communication, and organizational skills while working independently or collaboratively.<br>
<li>
</li></ul><div></div><p><b>Minimum Qualifications:
</b></p><ul><li>Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field; equivalent experience may be considered.
</li><li>2+ years of progressive experience in cybersecurity
</li><li>3+ years of experience IT, including hands-on security operations, threat detection, or engineering.
</li>2+ years of experience of network and application security, threat actor tactics (MITRE ATT&amp;CK), and incident response frameworks.<br>
<li>
</li></ul><p></p><p><b>Preferred Qualifications:
</b></p><ul><li>IT Security Certification, specifically GSEC, CEH, CISSO, CISA or CISSP, GCIA, OSCP and ITIL
</li><li>SDLC, and understand application security.
</li><li>Containerization and Development Security Operations
</li>Experience working in regulated environments or with industry frameworks (e.g., NIST, ISO 27001, CIS, or CMMC).<br>
<li>
 </li></ul><p></p><p><b>Benefits that make life better:
</b></p><ul><li>Comprehensive Healthcare
</li><li>401(k) with 100% company match; up to 5% vested
</li><li>Paid Time Off starting on day one
</li><li>Bonus opportunities
</li><li>Health- &amp; Dependent Care Flexible Spending Accounts
</li><li>Short- &amp; Long-Term Disability
</li><li>Life &amp; AD&amp;D Insurance
</li>Learning &amp; Training opportunities<br>
<li>
</li></ul><p></p><p><b>Raising the Standard of Excellence since 1911
</b></p><p>With over a century of proven excellence, StandardAero has become an industry leader in MRO services and customized solutions in the aerospace field. Our shared values and learning-based culture inspire our team to exceed their potential and power our customers&rsquo; missions worldwide. With on-the-job training, advancement opportunities, and excellent benefits, StandardAero invites you to experience a fulfilling and meaningful career with us.
</p><p><b>Inclusivity Is Our Standard
</b></p><p>It is StandardAero&rsquo;s policy to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information. Our supportive environment celebrates diversity with no room for harassment or discrimination of any kind. We invite you to bring your authentic self to our team and experience our welcoming culture.</p></div><p></p>

Analyst, Information Security

Cartafella Analytics

<p>We are looking for SOC Senior Analyst for Qatar location.</p><ul><li>Exposure to IT service management best practices such as ITIL and ISO27001</li><li>12+ years in SOC/IR/Digital Forencis preferable in MSSP.</li><li>Experience in ISO27001 process and procedures and can work on their own with little supervision</li><li>A good communicator at all levels.</li><li>A sound knowledge of IT security best practices, common attack types and detection / prevention methods.</li><li>Strong written and verbal communication skills</li><li>Attention to detail and great organisational skills</li><li>An active interest in Cyber Security, incident detection, network and systems security.</li><li>Experience or qualifications in network and systems monitoring</li><li>Experience in successful implementation / exposure / participation of a Business Continuity and Disaster Recovery Program</li><li>Experience in performing risk assessments and managing information security risks of an organization</li><li>University degree in any field related to Information Technology</li><li>Minimum 6+ years&rsquo; experience focused in the IT Security field (e.g. Incident Response, Incident Investigation, Incident Remediation)</li><li>Practical experience using SIEM platforms, preferably Google SecOps / Google Chronicle, including:</li><li>Maintain organization&rsquo;s compliance to various security standards such as ISO 27001/02, National Information Assurance Policy - Qatar</li></ul><p><b>Certification</b></p><ul><li>Certified Ethical Hacker</li><li>Certified Incident Responder Credentials from GIAC/SANS</li><li>Security+</li><li>CCSP / CCSE</li><li>Google SecOps</li></ul><p>If you are available, please send your cv immediately</p><p>Pay: Up to QAR2,000.00 per month</p><p>Work Location: In person</p>

SOC Senior Analyst for Qatar

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p><p>
Job Description</p><div><p>
USSTRATCOM is a Combatant Command responsible for strategic deterrence, nuclear operations, and enterprise IT services essential to national security. It oversees Nuclear Command, Control, and Communications (NC3), Joint Electromagnetic Spectrum Operations (JEMSO), Global Strike, and Missile Threat Assessments, working closely with other Combatant Commands, Services, and defense agencies. SCITLS will be a key component that will ensure mission success and the safety of the U.S. and its allies by providing 24/7 IT services and network support for NIPRNet, SIPRNet, JWICS, and SAP/SAR environment.</p><p></p><p>
CSSP DCO Senior Analyst</p><ul><li><p>
Monitors CSSP sensors and investigates abnormal findings.</p></li><li><p>
Performs threat intelligence analysis and generates reports.</p></li><li><p>
Triages incidents and supports incident response.</p></li><li><p>
Monitors, evaluates, and maintains systems and procedures to safeguard internal information systems, network, databases, and Web-based security.</p></li><li><p>
Helps develop mission-critical technical documents.</p></li><li><p>
Analyzes and assesses impacts on the business caused by theft, destruction, alteration or denial of access to information.</p></li><li><p>
Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in security plans.</p></li><li><p>
Adheres to security policies or plans for data, software applications, hardware, and telecommunications.</p></li></ul><p><br>
WHAT YOU&rsquo;LL NEED TO SUCCEED:</p><ul><li><p>
Education: Technical Training, Certification(s) or Degree</p></li><li><p>
Required Experience: 5+ years of related experience</p></li><li><p>
Required Certification: ITIL 4 Foundation within 9 months of hire; CEH or Sec+ within 6 months of hire</p></li><li><p>
Security Clearance Level: TS/SCI-eligible</p></li><li><p>
Location: Offutt, AFB</p></li></ul><p></p><p>
GDIT IS YOUR PLACE:</p><ul><li><p>
401K with company match</p></li><li><p>
Comprehensive health and wellness packages</p></li><li><p>
Internal mobility team dedicated to helping you own your career</p></li><li><p>
Professional growth opportunities including paid education and certifications</p></li><li><p>
Cutting-edge technology you can learn from</p></li><li><p>
Rest and recharge with paid vacation and holidays</p></li></ul><p></p><p>
#SCITLS</p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
5 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $93,500 - $126,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

CSSP DCO Analyst, Senior

PROZ TECHNOLOGIES

<p><b>Job Title:</b> SOC L2 Analyst (OT Security)<br/><b>Location:</b> Doha, Qatar (On-site)</p><p>About the Role</p><p>We are looking for an experienced <b>SOC L2 Analyst</b> to join a leading Security Operations Center (SOC) team in Qatar. The role focuses on <b>advanced threat monitoring, incident investigation, and response</b> across both IT and <b>Operational Technology (OT)</b> environments.</p><p>This is an excellent opportunity for cybersecurity professionals with strong <b>SIEM and incident handling experience</b>, especially those with exposure to <b>industrial/OT security systems</b>.</p><p>Key Responsibilities</p><ul><li>Investigate and analyze <b>security alerts and incidents</b>, including escalations from L1 analysts</li><li>Perform <b>in-depth threat analysis</b> across IT and OT environments</li><li>Act as an <b>incident responder</b> for security events and recommend remediation actions</li><li>Monitor and manage <b>SIEM alerts, logs, and SOC tickets</b> within SLA timelines</li><li>Escalate critical incidents to L3/Senior Analysts when required</li><li>Support and mentor <b>junior SOC analysts (L1)</b></li><li>Collaborate with internal teams to improve <b>threat detection and response capabilities</b></li><li>Contribute to SOC documentation, runbooks, and knowledge base</li></ul><p>Required Skills &amp; Experience</p><ul><li>Minimum <b>5+ years of experience</b> in SOC / Cybersecurity operations</li><li>Strong experience with <b>SIEM tools</b> (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)</li><li>Hands-on experience in <b>incident detection, investigation, and response</b></li><li>Strong knowledge of <b>network security, logs, and attack patterns</b></li><li>Experience with security tools such as <b>EDR, IDS/IPS, Firewalls, Vulnerability Scanners</b></li><li>Familiarity with <b>MITRE ATT&amp;CK framework</b></li><li>Good understanding of <b>Windows, Linux, and network environments</b></li></ul><p>Preferred (Nice to Have)</p><ul><li>Experience with <b>OT / ICS / SCADA security environments</b></li><li>Knowledge of protocols like <b>Modbus, DNP3, BACnet</b></li><li>Exposure to <b>industrial cybersecurity frameworks</b></li><li>Basic scripting knowledge (Python, PowerShell, Bash)</li></ul><p>Certifications (Preferred)</p><ul><li>SC-200, GCIH, CEH, or equivalent cybersecurity certifications</li><li>SIEM certifications (Splunk, Azure Sentinel, etc.)</li><li>OT Security certifications (e.g., Nozomi) are a plus</li></ul><p>Ideal Candidate</p><ul><li>SOC L2 Analyst / Senior Security Analyst</li><li>Experience working in <b>MSSP or enterprise SOC environments</b></li><li>Strong analytical and problem-solving skills</li><li>Ability to work in a <b>24x7 SOC environment</b></li></ul><p>Job Type: Permanent</p><p>Pay: Up to QAR15,000.00 per month</p><p>Work Location: In person</p>

SOC L2 Analyst (OT Security)

Qatar National Bank

<div></div><div><div><ul><li><div><b>Business Unit</b>
</div><div>QNB - Qatar
</div></li><li><div><b>Division</b>
</div><div>Not Applicable
</div></li><li><div><b>Department</b>
</div><div>Not Applicable
</div></li><li><div><b>Location</b>
</div><div>Doha, Qatar
</div></li><li><div><b>Closing Date</b>
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader"><b>About QNB</b></h5>
<p>Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.</p>
<p>QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.</p>
<p>QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.</p>
<p>Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.</p>
<p>QNB Group has an active community support program and sponsors various social, educational and sporting events.</p>
</div></div><div><div><div><h5 class="jobSectionHeader"><b>Job Summary</b></h5>
</div><div><p>The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Main Responsibilities</b></h5>
</div><div><p>A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
</p><p>B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives</p><p>
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is up to-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
</p><p>D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Education and Experience Requirements</b></h5>
</div><div><ul><li>Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul><p>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Note: you will be required to attach the following:</b></h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate
</li></ul><ul><li>Copy of Birth Certificate</li></ul></div></div></div></div></div><div></div>

Senior Vice President Cyber Security Strategy and Product Management

Aga Khan University

<div>
 <p>
  <strong>
   Introduction to the Aga Khan University:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Chartered in 1983, Aga Khan University (AKU) is a private, autonomous and self-governing international university with 13 teaching sites in 6 countries distributed across three continents. As an integral part of the Aga Khan Development Network, AKU provides higher education in several disciplines, carries out research pertinent to the countries in which it exists and has campuses, programmes and/or teaching hospitals in Afghanistan, Kenya, Pakistan, Tanzania, Uganda and the UK. As an international institution, AKU operates on the core principles of quality, relevance, impact and access; and AKU is a model of academic excellence and an agent of social change.
 </p>
 <p>
  <br/>
 </p>
 <p>
  As an equal opportunity employer, AKU believes in promoting a diverse and inclusive culture and is committed to adopt appropriate standards for safeguarding and promoting a respectful relationship with and between diverse workforce of its faculty, staff, trainees, volunteers, beneficiaries, wider communities, and other stakeholders with whom it works, including children and vulnerable adults and expects all employees/trainees and partners to share this commitment.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Role / Responsibilities:
  </strong>
 </p>
 <p>
  As Analyst, Information Security you will be assisting in managing the Global Information Security and to protect AKU&rsquo;s enterprise infrastructure, digital information, and business continuity globally through strong and effective security practices. At Aga Khan University, as an Analyst, Information Security you will be responsible for:
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   assisting in preparation, assessment and enforcement of information security policies, standards, guidelines and procedures and Perform IS policy and procedures gap assessments against information security, regulatory requirements and governance standards, for example ISO27001.2013, COBIT, PCI-DSS etc.
  </li>
  <li>
   ensuring that information security policy and relevant procedures are updated, reviewed and approved by the management at the defined frequency and are in compliance with applicable privacy and identity theft laws and other regulations.
  </li>
  <li>
   performing technology and information security risk assessments.
  </li>
  <li>
   liaising with IT and internal/external audit teams during information systems audit and working as a central point of contact from IT to ensure appropriate flow of information to audit team with any delay.
  </li>
  <li>
   working with IT team for successful closure of the audit observations for all sites (Pakistan, East Africa, UK and Afghanistan).
  </li>
  <li>
   actively participating in the Security Incident Response Team (SIRT).
  </li>
  <li>
   performing internal assessments and identify gaps in current documentation and operations
  </li>
  <li>
   and working to fix these gaps.
  </li>
  <li>
   working with other teams in technology, internal audit and vendors to ensure that AKU-wide information security requirements are incorporated into the rollout of new systems.
  </li>
  <li>
   performing and maintaining information/ data classification policy and procedure and educating IT and business users and ensure all critical information assets are classified properly.
  </li>
  <li>
   performing vulnerability assessments on operating systems, databases, and applications.
  </li>
  <li>
   reviewing of audit logs for critical applications, databases, OS and networks.
  </li>
  <li>
   conducting information security awareness trainings for AKU staff globally.
  </li>
  <li>
   working with business functional leads and technology team leads to ensure that user access rights review and privileged access rights review will complete on time.
  </li>
 </ul>
 <p>
 </p>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Eligibility Criteria / Requirements:
  </strong>
 </p>
 <ul>
  <li>
   a bachelor&rsquo;s degree in computer science, Computer Engineering, Information Security, or
  </li>
  <li>
   related field.
  </li>
  <li>
   relevant certifications such as CISA, CISM, CEH, CISSP, or equivalent Experience.
  </li>
  <li>
   1 to 2 years of hands-on experience in Information Security covering risk assessments, policy development, security awareness, IT audits, and implementation of ISO 27001 and PCI-DSS.
  </li>
  <li>
   proven expertise in performing security assessments for infrastructure, systems, and networks, with a focus on identifying vulnerabilities or gaps.
  </li>
  <li>
   experience in incident response planning, investigation, and handling breaches, including navigating legal and disciplinary actions.
  </li>
  <li>
   strong knowledge of Information Security frameworks and standards, including ISO 27001, PCI-DSS, NIST, GDPR, and CIS.
  </li>
  <li>
   ability to conduct information security risk assessments and critical practice assessments, providing actionable insights and recommending improvements.
  </li>
  <li>
   ability to manage and drive remediation efforts following security incidents, penetration tests, vulnerability scans, and audit results.
  </li>
  <li>
   deep understanding of business activities, with the ability to tailor security solutions that address specific needs within the organization.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Comprehensive employment reference checks will be conducted
 </p>
 <p>
 </p>
</div>


Raytheon

<div><p><b>Date Posted:</b></p>
2026-04-10<p><b>
Country:</b></p>
United States of America<p><b>
Location:</b></p>
US-AZ-TUCSON-848 ~ 1151 E Hermans Rd ~ BLDG 848<p><b>
Position Role Type:</b></p>
Onsite<p><b>
U.S. Citizen, U.S. Person, or Immigration Status Requirements:</b><b>
</b></p>Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
<p><b>Security Clearance Type:
</b></p>DoD Clearance: Secret<p><b>
Security Clearance Status:
</b></p>Active and existing security clearance required on day 1<p></p><p>
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling &ndash; to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today&rsquo;s mission and stay ahead of tomorrow&rsquo;s threat. Our team solves tough, meaningful problems that create a safer, more secure world.</p><p></p><p>
The Analyst supports the day-to-day security administration for programs within accredited facilities. Under the guidance of the CSSO and the Program Security Management team, the Analyst helps create and maintain a secure operating environment that protects program information, people, systems, and spaces. Core responsibilities include supporting and implementation of US Government and local SOPs, supporting the delivery of initial and annual security training, assisting with self- inspections with corrective action plans, maintaining personnel vetting records (e.g., PARs, SAPIA, foreign travel), coordinating visitor control, managing document/material accountability and/or control, and promptly reporting/assisting with security inquiries.</p><p></p><p>
Must possess a valid driver&rsquo;s license for escorting individuals across business locations</p><p></p><p><b>
What You Will Do
</b></p><ul><li>Support Program Security Management and daily operations. Assist the CSSO in implementing program security requirements, coordinating with program leadership to maintain compliant processes across personnel vetting, physical security, accountability, control, SETA, and incident response.
</li><li>Assist the CSSO with maintaining security SOPs. Help gather updates, draft simple revisions, and coordinate changes to facility or location specific SOPs that address basic security processes such as reporting requirements, clearance procedures, training, visitor handling, destruction and reproduction practices, and day-to-day operational logistics.</li><li>
Deliver security education &amp; training (SETA). Provide initial, situational, and annual refresher training to accessed personnel; keep training records current in the authorized system of record (e.g., JADE or successor).
</li><li>Manage personnel vetting records. Create and maintain vetting files (PSQs, PARs, SAPIA, foreign travel/contact reporting, incident documentation) in JADE or approved local records when JADE access is unavailable.
</li><li>Coordinate visitor control and escorts. Validate accesses via JADE/approved methods, manage visit notifications/logs, and ensure proper escort of non-accessed visitors; implement positive identification and visitor records retention per policy.
</li><li>Assist with annual self-inspections. Help the CSSO review facility security processes using a security compliance checklist, document basic findings, and support development and tracking of corrective action items under supervisor guidance.</li><li>
Safeguard classified material. Follow approved methods for storage, transmission, reproduction, destruction, and accountability (including annual inventory and disclosure sheets); support courier planning and execution with appropriate authorizations.
</li><li>Support incident reporting and inquiries; assist Program Security Management with inquiries and documentation.
</li><li>Enforce physical security procedures. Help implement access control, badging, alarm/lock standards (to include alarm responses during off hours), entry/exit inspections, control of combinations, and management of PEDs/EMDs consistent with policies.</li></ul><p></p><p><b>
Qualifications You Must Have</b></p><ul><li>
Typically requires: A University Degree or equivalent experience and less than 2 years prior relevant experience.</li><li>
Experience working with 32 CFR, Part 117 (NISPOM), DoDM 5205.07 series, JSIG, and ICD-705.</li></ul><p></p><p><b>
Qualifications We Prefer</b></p><ul><li>
Working knowledge of Microsoft Excel, PowerPoint and Word.</li><li>
Familiarity with DISS, eSecurity, Access Commander, and Purifile preferred.</li><li>
Masters Degree major in Business Management, Security and/or Risk Management, Government Policy, Information Management, Criminal Justice, or other related field of study.</li><li>
Possess a minimum of a current, final SECRET security clearance with an investigation not older than five (5) years, or enrolled in CE / CV on the first day of employment.</li><li>
Related training with Defense Counterintelligence and Security Agency, Center for Development of Security Excellence, or equivalent security certification programs.</li><li>
Willing to travel on company business.</li></ul><p></p><p><b>
What We Offer:</b></p><ul><li><p>
Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Safety, Trust, Respect, Accountability, Collaboration, and Innovation.</p></li></ul><p></p><p><b>
Learn More &amp; Apply Now</b></p><ul><li><p>
Please consider the following role type definition as you apply for this role: <b>Remote</b> - Employees who are working in Remote roles will work primarily remotely</p></li></ul><p></p><p><b><i>
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.</i></b></p><p></p>
The salary range for this role is 57,200 USD - 108,800 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.<p></p>
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.<p></p>
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.<p></p>
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.<p></p>
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.<p></p><p><i>
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.</i>
</p><p></p><p><b>Privacy Policy and Terms:</b></p><p>
Click on this link to read the Policy and Terms</p></div>

Analyst-Program Security - Tucson, AZ

Search 3446+ Cyber security analyst jobs near you this June. New roles added regularly across leading industries. Apply today.

3446 cyber security analyst jobs Near Me

Analyst, Information Security

SOC Senior Analyst for Qatar

CSSP DCO Analyst, Senior

SOC L2 Analyst (OT Security)

Senior Vice President Cyber Security Strategy and Product Management

Analyst, Information Security

Analyst-Program Security - Tucson, AZ