information security analyst

SanDisk

<div><b>Company Description</b><p><br>
Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today&rsquo;s needs and tomorrow&rsquo;s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we&rsquo;re living in and that we have the power to shape.</p><p>
Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality.</p><p>
Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward.</p><b><br>
Job Description</b><p><br>
As an Information Security Analyst 4, you will play a pivotal role in advancing Sandisk&rsquo;s Information Security Governance, Risk Management, and Compliance (GRC) program. You will be a key contributor to the Responsible GenAI Program, leading security risk assessments, collaborating with cross-functional teams, and helping operationalize governance processes. You will work closely with business stakeholders, Legal, IT, and Information Security to ensure GenAI use cases are evaluated, de-risked, and aligned with Sandisk&rsquo;s security and compliance standards. Additionally, you will support the development, enhancement, and implementation of enterprise-wide information security risk management frameworks, policies, and procedures aligned with industry standards, regulatory requirements, and organizational objectives. Your expertise will help strengthen our security posture and ensure compliance across the organization.</p><p><b>
ESSENTIAL DUTIES AND RESPONSIBILITIES:</b></p><p>
As Responsible GenAI Program Operator and Assessor :</p><ul><li>
Operate and manage the Responsible GenAI program, overseeing intake, coordination, and tracking of GenAI use cases, platforms, and vendors.</li><li>
Conduct GenAI risk assessments focused on data sensitivity, access controls, model interfaces, and memory sources, recommending mitigation strategies for high-risk use cases.</li><li>
Ensure compliance with legal and regulatory standards by collaborating with Legal and procurement SMEs on privacy, licensing, and governance requirements.</li><li>
Integrate GenAI risk practices into procurement, vendor management, and IT risk workflows to strengthen enterprise-wide governance.</li><li>
Support policy development and continuous improvement, contributing to GenAI governance documentation and Enablement Committee reviews for high-risk or pilot use cases.</li></ul><p>
As GRC Security Analyst :</p><ul><li>
Implement enterprise-wide risk management frameworks aligned with ISO 27001, NIST CSF 2.0, and other industry standards.</li><li>
Conduct technical and business process risk assessments to identify, evaluate, and mitigate information security risks.</li><li>
Collaborate cross-functionally to embed risk management into organizational processes, projects, and compliance initiatives.</li><li>
Support audits and reporting by generating risk metrics and assisting with internal and external security assessments.</li></ul><br>
<b>
Qualifications</b><p><br>
REQUIRED:</p><ul><li>
Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field, with 4+ years of experience in Information Security, focusing on GRC or risk management.</li><li>
Expertise in risk assessments across technical and business processes, including working knowledge of SANS, OWASP, and CSA AI security frameworks.</li><li>
Familiarity with GenAI technologies and risks, including prompt injection and data leakage, and understanding of responsible AI principles.</li><li>
Knowledge of AI governance standards, including ISO 42001/42005 and NIST AI RMF; 2+ years of experience with AI technologies and technical roles is highly desirable.</li></ul><p>
PREFERRED:</p><ul><li>
Security/GRC: CISSP, CISM, CRISC, GSNA (or equivalent)</li><li>
Technical: GCIH, GPEN, CEH, OSCP (or equivalent)</li><li>
Experience supporting AI/ML or GenAI programs in a governance or security role is highly desirable</li></ul><p>
SKILLS:</p><ul><li>
 Strong communication and stakeholder engagement skills, with the ability to thrive in fast-paced, cross-functional environments.</li></ul><br>
<b>
Additional Information</b><p><br>
Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person&rsquo;s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person&rsquo;s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the &quot;Know Your Rights: Workplace Discrimination is Illegal&rdquo; poster. Our pay transparency policy is available here.</p><p></p><p><br>
Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.</p><p></p><p><br>
Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at jobs.accommodations@sandisk.com to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.</p><p></p><p><br>
Based on our experience, we anticipate that the application deadline will be <b>01/15/2026</b> (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline.</p><p></p><p><br>
#LI-TS1</p><div></div><p><b>
Compensation &amp; Benefits Details</b></p><ul><li>
An employee&rsquo;s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs.</li><li>
The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future.</li><li>
You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards.</li><li>
We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&amp;D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan.</li><li>
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.</li></ul></div>

Information Security Analyst 4

ECCO Gulf Majorel Qatar

<div><b>Information Security Analyst</b>
<p><b>
Job Purpose</b></p>
<ul>
<li>Responsible to support Information Security Governance, Risk and Control</li>
<li>activities. Assist in all information security activities in order to protect the</li>
<li>organization&rsquo;s information technology assets from cyber-attacks.</li>
<li>Function Information Technology</li>
</ul>
<p><b>Key Responsibilities</b></p><br>
<p></p>
<ul>
<li> Supporting and maintaining the required Information Security policies, procedures, guidelines, registers and relevant documentations for the GRC activities.</li>
<li> Obtain, review, and prepare periodic review reports such as User</li>
<li>Access Management reports for Audit, GRC and other government</li>
<li>regulatory compliance activities.</li>
<li> Coordinate, conduct and participate in all related Audits includingISMS, MPTO, Internal and External.</li>
<li> Maintain overall ISMS related documentation with appropriate versioning and tracking changes</li>
<li> Coordinate Information Security and Privacy Management related</li>
<li>Meetings</li>
<li> Train and support the internal teams and staffs on activities related to information security compliance and personal information and privacy management</li>
<li> Ensure all approved policies related to Information Security are applied and maintained in an effective and efficient manner</li>
<li> Coordinate with relevant Teams and external MSPs on incidence response activities</li>
<li> Support staffs on minor troubleshooting activities related to information security Create / Translate relevant documentations and contents in Arabic for</li>
<li>wider circulation Coordinate, communicate effectively and maintain cordial relationship with internal and external departments of Qatar Post with respect to information security activities</li></ul><br>
<p></p>
<p><b>
Knowledge / Skills Required</b></p>
<ul>
<li> University Degree related to Information Technology or similar</li>
</ul>
<p><b>Qualification</b></p>
<ul>
<li> Good knowledge in Arabic both written and spoken</li>
<li> Preferably certifications in Information Security such as CISA, CISM,</li>
<li>MCSE</li>
<li>Preferably certifications in ISO27001:2013 Lead Implementer</li>
<li> 3+ years of experience in information security or information</li>
<li>technology processing facilities</li></ul></div>

Information Security Analyst

<p></p><div><div>Tele-Consultants, Inc. (TCI) is actively seeking an experienced Information Security Analyst to support the USSF Space Operations Command (USSF SpOC) at Peterson Space Force Base (SFB) in Colorado Springs, CO.</div><div></div><div><br>
 <b>Job responsibilities include, but are not limited to:</b></div><div></div><div><br>
<ul><li>
Provide cybersecurity oversight and Facility Security Officer (FSO) functions.</li><li>
Ensure compliance with DoD 5220.22-M (NISPOM).</li><li>
Manage personnel clearances.</li><li>
Oversee secure systems accreditation (RMF/ATO).</li><li>
Coordinate with DCSA for inspections and reporting.</li></ul></div><div></div><div><b><br>
Minimum Education and Experience:</b></div><div></div><div><br>
<ul><li>
Bachelor&rsquo;s degree in Cybersecurity or related field.</li><li>
5+ years of related experience.</li></ul></div><div></div><div><b><br>
Additional Qualifications:</b></div><div></div><div><br>
<ul><li>
Ability to communicate effectively in team-oriented, fast-paced environment;</li><li>
Ability to work independently and as part of a team.</li></ul></div><div></div><div><br>
The nature of this position requires U.S. citizenship and the ability to pass a thorough background investigation.</div><div></div><div><br>
The primary location for performance of the work will be Peterson SFB, CO with occasional travel.</div><div></div><div><br>
We offer a competitive compensation commensurate with the technical and professional qualifications, a great benefits package, and an excellent work environment. As a federal government contractor, we participate in the e-Verify program.</div><div></div><div><br>
If you possess the qualifications for this position and you&rsquo;re ready to join a team of professionals committed to supporting our DoD clients by providing the outstanding level of service they&rsquo;ve come to expect, we want to hear from you.</div><div></div><div><br>
Staffing for this position is contingent on receipt of funding.</div><div></div><div><br>
Tele-Consultants, Inc. is an Equal Employment Opportunity Employer.</div></div>

HugoBank

<div><p>Are you passionate about cyber threat detection and response? We are seeking a Cybersecurity Analyst to monitor, analyze, and triage security alerts, ensuring a proactive defense against evolving threats in a Digital Retail Bank (DRB) environment. This role involves SIEM monitoring, incident handling, vulnerability management, and compliance enforcement to maintain the highest security standards. If you have experience in threat intelligence, log analysis, and security policy implementation, this is the perfect opportunity to contribute to a dynamic and cutting-edge cybersecurity team.</p><p><b>
Requirements</b></p><p>
Threat Monitoring &amp; Detection:</p><ul>
<li>Monitor and analyze SIEM alerts to detect potential security incidents.</li>
<li>Conduct log analysis from firewalls, servers, applications, and endpoint security tools.</li>
<li>Develop and refine correlation rules and use cases to improve threat detection.</li>
<li>Utilize threat intelligence sources to enhance anomaly detection and response.</li>
</ul><p></p><p>Incident Response:</p><ul>
<li>Perform initial triage and incident handling to assess potential threats.</li>
<li>Conduct root cause analysis to determine the impact and scope of security events.</li>
<li>Maintain detailed incident documentation for compliance and reporting purposes.</li>
</ul><p></p><p>Vulnerability Management:</p><ul>
<li>Perform vulnerability scanning and risk assessment to identify security gaps.</li>
<li>Support penetration testing efforts and assist in remediation strategies.</li>
<li>Develop and implement risk mitigation plans to reduce attack vectors.</li>
</ul><p></p><p>Security Policy &amp; Compliance:</p><ul>
<li>Ensure adherence to regulatory security frameworks (PCI DSS, ISO 27001, SBP regulations).</li>
<li>Conduct security awareness training for internal teams.</li>
<li>Monitor compliance with security policies and recommend necessary improvements.</li>
</ul><p></p><p>Research &amp; Continuous Improvement:</p><ul>
<li>Stay updated on emerging threats, attack techniques, and cybersecurity trends.</li>
<li>Continuously optimize SIEM correlation rules and fine-tune detection mechanisms.</li>
<li>Enhance security operations processes to improve efficiency.</li>
</ul><p>Collaboration &amp; Third-Party Security:</p><ul>
<li>Work closely with internal security teams and third-party service providers to correlate threat intelligence.</li>
Collaborate with IT and business units to enhance overall cyber resilience.<br>
<li>
</li></ul><p><b>Requirements</b></p><br>
<ul>
<li>Bachelor&rsquo;s degree in Computer Science, IT, Cybersecurity, or a related field.</li>
<li>4-6 years of experience in infrastructure security, SIEM monitoring, or threat intelligence.</li>
<li>Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and endpoint security.</li>
<li>Proficiency in using SIEM solutions (QRadar, Splunk, ArcSight, Wazuh, etc.).</li>
<li>Expertise in vulnerability assessment, threat modeling, and risk analysis.</li>
<li>Hands-on experience with security tools (Metasploit, Burp Suite, Nessus, etc.).</li>
<li>Experience in policy development, security guidelines, and compliance frameworks.</li>
<li>Proficiency in scripting languages (Python, PowerShell, SPL, SQL) for security automation.</li>
Professional certifications such as CISSP, CEH, OSCP, or vendor-specific security credentials are a plus.<br>
<li>
</li></ul><p>Objectives &amp; KPIs</p><p></p><ul>
<li>Mean Time to Detect (MTTD): Average time taken to detect, analyze, and escalate security incidents.</li>
<li>Incident Resolution Rate: Percentage of incidents resolved within predefined SLAs.</li>
<li>Alert Accuracy: Ratio of false positives vs. true positives identified in SIEM alerts.</li>
<li>SIEM Optimization: Percentage of correlation rules and use cases updated or improved.</li>
<li>Root Cause Analysis (RCA) Completion: Percentage of incidents with a thorough RCA report.</li>
<li>Rule Tuning Frequency: Regular enhancements to improve SIEM efficiency and reduce unnecessary alerts.</li>
<li>Regulatory Compliance: Percentage of adherence to SBP regulations, PCI DSS, ISO 27001, and security standards.</li></ul></div>

<div>
 Are you passionate about cyber threat detection and response? We are seeking a Cybersecurity Analyst to monitor, analyze, and triage security alerts, ensuring a proactive defense against evolving threats in a Digital Retail Bank (DRB) environment. This role involves SIEM monitoring, incident handling, vulnerability management, and compliance enforcement to maintain the highest security standards. If you have experience in threat intelligence, log analysis, and security policy implementation, this is the perfect opportunity to contribute to a dynamic and cutting-edge cybersecurity team.
 <br/>
 <br/>
 <strong>
  <strong>
   Requirements
   <br/>
   <br/>
  </strong>
 </strong>
 Threat Monitoring &amp; Detection:
 <br/>
 <br/>
 <ul>
  <li>
   Monitor and analyze SIEM alerts to detect potential security incidents
  </li>
  <li>
   Conduct log analysis from firewalls, servers, applications, and endpoint security tools
  </li>
  <li>
   Develop and refine correlation rules and use cases to improve threat detection
  </li>
  <li>
   Utilize threat intelligence sources to enhance anomaly detection and response
   <br/>
   <br/>
  </li>
 </ul>
 Incident Response:
 <br/>
 <br/>
 <ul>
  <li>
   Perform initial triage and incident handling to assess potential threats
  </li>
  <li>
   Conduct root cause analysis to determine the impact and scope of security events
  </li>
  <li>
   Maintain detailed incident documentation for compliance and reporting purposes
   <br/>
   <br/>
  </li>
 </ul>
 Vulnerability Management:
 <br/>
 <br/>
 <ul>
  <li>
   Perform vulnerability scanning and risk assessment to identify security gaps
  </li>
  <li>
   Support penetration testing efforts and assist in remediation strategies
  </li>
  <li>
   Develop and implement risk mitigation plans to reduce attack vectors
   <br/>
   <br/>
  </li>
 </ul>
 Security Policy &amp; Compliance:
 <br/>
 <br/>
 <ul>
  <li>
   Ensure adherence to regulatory security frameworks (PCI DSS, ISO 27001, SBP regulations)
  </li>
  <li>
   Conduct security awareness training for internal teams
  </li>
  <li>
   Monitor compliance with security policies and recommend necessary improvements
   <br/>
   <br/>
  </li>
 </ul>
 Research &amp; Continuous Improvement:
 <br/>
 <br/>
 <ul>
  <li>
   Stay updated on emerging threats, attack techniques, and cybersecurity trends
  </li>
  <li>
   Continuously optimize SIEM correlation rules and fine-tune detection mechanisms
  </li>
  <li>
   Enhance security operations processes to improve efficiency
   <br/>
   <br/>
  </li>
 </ul>
 Collaboration &amp; Third-Party Security:
 <br/>
 <br/>
 <ul>
  <li>
   Work closely with internal security teams and third-party service providers to correlate threat intelligence
  </li>
  <li>
   Collaborate with IT and business units to enhance overall cyber resilience.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  <strong>
   Requirements
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field
  </li>
  <li>
   4-6 years of experience in infrastructure security, SIEM monitoring, or threat intelligence
  </li>
  <li>
   Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and endpoint security
  </li>
  <li>
   Proficiency in using SIEM solutions (QRadar, Splunk, ArcSight, Wazuh, etc.)
  </li>
  <li>
   Expertise in vulnerability assessment, threat modeling, and risk analysis
  </li>
  <li>
   Hands-on experience with security tools (Metasploit, Burp Suite, Nessus, etc.)
  </li>
  <li>
   Experience in policy development, security guidelines, and compliance frameworks
  </li>
  <li>
   Proficiency in scripting languages (Python, PowerShell, SPL, SQL) for security automation
  </li>
  <li>
   Professional certifications such as CISSP, CEH, OSCP, or vendor-specific security credentials are a plus.
   <br/>
   <br/>
  </li>
 </ul>
 Objectives &amp; KPIs
 <br/>
 <br/>
 <ul>
  <li>
   Mean Time to Detect (MTTD): Average time taken to detect, analyze, and escalate security incidents
  </li>
  <li>
   Incident Resolution Rate: Percentage of incidents resolved within predefined SLAs
  </li>
  <li>
   Alert Accuracy: Ratio of false positives vs. true positives identified in SIEM alerts
  </li>
  <li>
   SIEM Optimization: Percentage of correlation rules and use cases updated or improved
  </li>
  <li>
   Root Cause Analysis (RCA) Completion: Percentage of incidents with a thorough RCA report
  </li>
  <li>
   Rule Tuning Frequency: Regular enhancements to improve SIEM efficiency and reduce unnecessary alerts
  </li>
  <li>
   Regulatory Compliance: Percentage of adherence to SBP regulations, PCI DSS, ISO 27001, and security standards
  </li>
 </ul>
</div>


TSYS|Total System Services

<div><p>Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow.
</p><p></p><h2 class="jobSectionHeader"><b>Summary of This Role</b></h2><p>
Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security policies, procedures and systems, including hardware, firmware and software . Ensures that IS security architecture/designs, plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS security . Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents. Investigates and resolves security incidents and recommends enhancements to improve security. Develops techniques and procedures for conducting IS security risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents.</p><p></p><h2 class="jobSectionHeader"><b>
What Part Will You Play?</b></h2><p></p><ul><li>
Gains and maintains knowledge of how to monitor complex systems and response to known and emerging threats against the Global Payments network via intrusion detection software</li><li>
Assists in detailed, comprehensive investigation of security issues by reviewing security log data, interpreting data in support of security event management process from various data feeds and triages on a wide variety of security events.</li><li>
Under close supervision performs incident handling process by gaining knowledge in implementation of containment, protection and remediation activities.</li><li>
Gains and maintains knowledge of new and emerging threats that can affect the organization's information assets by assisting in analysis of third party software/solutions, IT configuration changes (including access control requests), and network/system architecture from risk perspective</li><li>
Under close supervision designs and configures security systems, including proxy, remote access, mail gateway, intrusion prevention, wireless networking, data leak prevention, security information and event management and web application firewalls.</li><li>
Assists in assessing and disseminating threats related to the enterprise in regard to current vulnerability by managing and developing an emerging threat model.</li><li>
Develops an understanding of how to assess risks based on changes to implementation of ISO(International Organization for Standardization)/BSO(Business Services Online); gains knowledge of PCI(Payment Card Industry)/Logical Security guidelines and models, HIPPA(health insurance portability and accountability act), PII(Personally Identifiable Information), and Card personalization.</li><li>
Gains knowledge of how to create cost effective solutions for system/application development regarding Information Security processes and concepts in applicable systems and software.</li><li>
Works under close supervision to perform day-to-day Information Security functions pertaining to numerous security software products and processes.</li></ul><p></p><h2 class="jobSectionHeader"><b>
What Are We Looking For in This Role?</b></h2><p><b>
Minimum Qualifications</b></p><p></p><ul><li>
Bachelor's Degree</li><li>
Relevant Experience or Degree in: Bachelor's degree in Computer Science, Info Security, or related field. Or relevant work experience in a related field.</li><li>
Typically No Relevant Experience Required</li></ul><p><b><br>
Preferred Qualifications</b></p><ul><li>
Typically Minimum 2 Years Relevant Exp</li><li>
Including network operations or engineering or system administration on Unix, Linux, MAC(Message Authentication Code), or Windows; common security operations, intrusion detection systems, Security Incident Even Management systems, and anti-virus collection logs; including knowledge of industry standard security compliance programs PCI(Payment Card Industry), SOX(Sarbanes-Oxley) , GLBA(Gramm Leach Bliley Act), etc.))</li></ul><p></p><h2 class="jobSectionHeader"><b>
What Are Our Desired Skills and Capabilities?</b></h2><p></p><ul><li>
Skills / Knowledge - Learns to use professional concepts. Applies company policies and procedures to resolve routine issues.</li><li>
Job Complexity - Works on problems of limited scope. Follows standard practices and procedures in analyzing situations or data from which answers can be readily obtained. Builds stable working relationships internally.</li><li>
Supervision - Normally receives detailed instructions on all work.</li><li>
Risk Assessment - Ability to identify, communicate, and mitigate risk within technical solution designs</li><li>
Industry Knowledge - Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.</li><li>
Incident Response - Knowledge and skills to contribute to all phases of Incident Response.</li></ul><p>
Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact jobs@globalpay.com.</p></div><p></p>

Information Security Analyst 1

FirstHive

<p><b>Job Designation:</b> Information Security Analyst</p><p><b>Job Location:</b> Bangalore</p><p><b>What is the role? </b></p><p>The role requires the candidate to be proactive and spearhead our efforts to protect our assets and mitigate security risks.</p><p><b>Key Responsibilities:</b></p><p><b>Security Leadership:</b></p><ul><li>Provide strategic direction and leadership in all aspects of information security, including risk management, compliance, and incident response.</li><li>Develop and implement security policies, procedures, and best practices to protect the organization's assets and mitigate security risks.</li></ul><p><b>Ethical Hacking:</b></p><ul><li>Conduct regular security assessments and penetration tests to identify vulnerabilities in systems, applications, and infrastructure.</li><li>Utilize ethical hacking techniques and tools to simulate real-world cyber attacks and assess the effectiveness of defensive measures.</li><li>Provide actionable recommendations and remediation guidance to address identified security weaknesses.</li></ul><p><b>Threat Intelligence and Monitoring: </b></p><ul><li>Stay abreast of the latest security threats, vulnerabilities, and attack techniques through threat intelligence sources and industry research.</li><li>Monitor security logs, alerts, and incident reports to detect and respond to security incidents in a timely manner.</li></ul><p>Develop and maintain security monitoring tools and systems to enhance the organization's threat detection capabilities.</p><p><b>Security Awareness and Training: </b></p><ul><li>Design and deliver security awareness programs and training sessions to educate employees about security best practices and promote a culture of security awareness.</li><li>Conduct phishing simulations and other security exercises to assess and improve employee security awareness and readiness.</li></ul><p><b>Compliance and Risk Management: </b></p><ul><li>Ensure compliance with relevant security standards, regulations, and industry frameworks (e.g., GDPR, PCI DSS, ISO 27001).</li><li>Conduct risk assessments and vulnerability assessments to identify and prioritize security risks, and work with stakeholders to implement appropriate controls and mitigations.</li></ul><p><b>Incident Response and Forensics:</b></p><ul><li>Lead incident response activities during security incidents, coordinating with internal teams and external stakeholders to contain, investigate, and remediate security breaches.</li><li>Conduct digital forensics investigations to determine the root cause of security incidents and support legal and regulatory requirements.</li></ul><p><b>Preferred Qualifications with Skills &amp; Experience: </b></p><ul><li>Bachelor's or Master's degree in Computer Science, Information Security, or related field.</li><li>10+ years of experience in information security, with a focus on ethical hacking and penetration testing.</li><li>Proven experience leading security initiatives in complex environments.</li><li>Certification(s) in ethical hacking (e.g., CEH, OSCP) and other relevant security certifications (e.g., CISSP, CISM) preferred.</li><li>Deep understanding of security principles, technologies, and best practices, including network security, cryptography, and secure coding.</li><li>Strong technical skills in penetration testing tools and techniques, such as Metasploit, Burp Suite, and Nmap.</li><li>Excellent communication and interpersonal skills, with the ability to effectively communicate technical concepts to both technical and non-technical audiences.</li><li>Strong problem-solving skills and the ability to think creatively to address complex security challenges.</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: &#8377;2,000,000.00 - &#8377;2,500,000.00 per year</p><p>Benefits:</p><ul><li>Commuter assistance</li><li>Health insurance</li><li>Provident Fund</li></ul><p>Experience:</p><ul><li>Information security: 5 years (Required)</li></ul><p>License/Certification:</p><ul><li>CEH (Required)</li></ul><p>Work Location: In person</p>

Senior Information Security Analyst

Search 10000+ Information security analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 information security analyst jobs NEAR_ME

Information Security Analyst 4

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst 1

Senior Information Security Analyst