information security analyst

IntouchCX

About IntouchCX
 
IntouchCX is a global leader in customer experience management, digital engagement, and AI and automation solutions. We immerse ourselves in your world with curiosity, creativity, and innovation to deliver exceptional results. For over 20 years, we have scaled with soul to become a disruptive industry leader by building trusted long-term relationships with our brand partners and empowering our people to drive positive change.
 
About the Job
 
The Information Security Analyst (ISA) will be managed by the Lead Analyst, and this role will be responsible for the day-to-day operations of threat monitoring, vulnerability management, and security control administration for a subset of the organization.
 
The ISA will perform regular predefined audits of various IT components as defined by IntouchCX clients and the Information Security Operations Center. The role will be part of a team and is expected to participate in regular team and client meetings to present audit findings and discuss ways to better organizational security.
 
As an Information Security Analyst, You Will…
 
<ul>
<li>Perform daily, weekly, and monthly security-related audits following standard operating procedures</li>
<li>Respond to security incidents and author security incident reports by performing incident investigation activities with various groups</li>
<li>Communicate and present audit findings and security compliance status to clients</li>
<li>Perform security analysis on alerts, logs, and events generated from various system components and controls throughout the environment</li>
<li>Assist in responding to security threats and incidents, developing incident reports, and submitting to clients</li>
<li>Audit camera functionality and employee badging management and access</li>
<li>Be in charge of the administration and use of various technical security controls:</li>
<li>Log collection and correlation (SIEM)</li>
<li>Endpoint (Antivirus/EDR, FIM, Log IDS)</li>
<li>Vulnerability scanning and identification</li>
<li>Data loss prevention</li>
<li>Develop, implement, and manage tools and processes to aid in threat monitoring and other security-related activities</li>
<li>Document and communicate security issues to various organizational units and clients</li>
<li>Work with the security team to identify methods to bolster threat detection and prevention based on discovered issues</li>
</ul>
As an Information Security Analyst, You Have…
 
<ul>
<li>College diploma in Information Security with 3 years comparable work experience</li>
<li>Security certifications such as CISSP, CISM, and related GIAC certifications are considered as assets</li>
<li>Professional experience in performing security analysis in a corporate environment and communicating with various business units</li>
<li>MacOS knowledge and proficiency</li>
<li>MacOS shell environment use is considered an asset</li>
<li>Project management certification or training is considered an asset</li>
<li>Clear written and vocal communication skills</li>
<li>Ability to translate security and compliance frameworks into operational repeatable tasks</li>
<li>The ability to work in a fast-paced and time-sensitive environment while maintaining quality, timelines, and expectations</li>
<li>Excellent analytical, critical thinking, and problem-solving skills</li>
<li>The ability to research, source as well as compile and summarize information</li>
<li>Superior attention to detail</li>
<li>Self-motivated and goal-oriented</li>
</ul>

Information Security Analyst

DataPath, Inc.

<div>DataPath is a global leader in remote satellite-based communications solutions that solve our customers&rsquo; toughest communications challenges in urgent time frames and under extreme conditions. We specialize in enabling complex communication networks that are critical to the operations of the Department of Defense, Civilian Government, and commercial markets.
Summary
DataPath, Inc. is seeking an Information Security Analyst that will Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
Roles and Responsibilities:<ul><li>
Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.</li><li>
Monitor current reports of computer viruses to determine when to update virus protection systems.</li><li>
Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.</li><li>
Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.</li><li>
Modify computer security files to incorporate new software, correct errors, or change individual access status.</li></ul>
Minimum Requirements:<ul><li>
Bachelor&rsquo;s Degree (B.S) in related field.
</li><li>Minimum 15 Years of relevant experience.
</li><li>Minimum 5 years in the Department of Defense contracting market of major weapon systems product development and acquisitions</li></ul>
Required Clearance:<ul><li>
Secret</li></ul>
DataPath is an equal opportunity employer committed to building a diverse global culture that values teamwork, integrity, innovation, leadership, and an unwavering commitment to our customers.</div>

Stellar Hunters

<div>We are seeking a detail-oriented and strategically minded Information Security Compliance Analyst to join our security and risk team. The ideal candidate will support the development, implementation, and maintenance of information security compliance programs, frameworks, and controls; ensure alignment with applicable regulatory and contractual requirements; and collaborate with IT, engineering, legal, and business stakeholders to reduce risk and demonstrate compliance. This role requires hands-on compliance experience, strong knowledge of security frameworks and standards, excellent documentation skills, and the ability to communicate technical requirements to non-technical audiences.<h3 class="jobSectionHeader">
Key Responsibilities for Information Security Compliance Analyst</h3><ul><li>
Implement, maintain, and monitor information security compliance programs and control frameworks (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS, HIPAA) to ensure ongoing alignment with regulatory, contractual, and business requirements.</li><li>
Manage and execute internal compliance assessments, risk assessments, and control testing; document findings, track remediation activities, and verify corrective actions.</li><li>
Support third-party security assessments and vendor risk management processes, including intake questionnaires, evidence collection, review of results, and coordination of mitigation plans with vendors and internal stakeholders.</li><li>
Coordinate and support external audits and certification efforts (e.g., SOC 2 audits, ISO certifications, regulatory reviews), serving as a primary point of contact for auditors and external assessors.</li><li>
Develop, maintain, and update security policies, standards, procedures, and control matrices; ensure documentation is current, accessible, and mapped to applicable frameworks and requirements.</li><li>
Collect, analyze, and report compliance metrics and status to security leadership and cross-functional partners; prepare evidence packages and executive-ready reports demonstrating control effectiveness and remediation progress.</li><li>
Collaborate with Information Security, IT operations, engineering, legal, and business teams to interpret compliance requirements, integrate controls into processes and systems, and advise on remediation or compensating controls.</li><li>
Stay informed of changes in privacy, security, and regulatory landscapes; evaluate impacts to the organization and recommend required updates to policies, controls, or compliance programs.</li><li>
Provide training and awareness sessions for employees on security compliance topics, control responsibilities, and evidence collection best practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Risk Management, or related field, or equivalent experience.</li><li>
3+ years of experience in information security compliance, audit, risk management, or related roles within technology-driven or regulated organizations.</li><li>
Practical knowledge of common security frameworks and standards (e.g., SOC 2, ISO 27001, NIST CSF, PCI-DSS) and experience mapping controls to requirements.</li><li>
Experience performing control testing, risk assessments, vendor security reviews, and preparing evidence for audits or certifications.</li><li>
Strong written and verbal communication skills; ability to produce clear policy and procedure documentation and present compliance status to technical and non-technical stakeholders.</li><li>
Familiarity with security and compliance tooling (e.g., GRC platforms, SIEM, vulnerability management, ticketing/ITSM systems) and proficient with Excel or similar data analysis tools.</li><li>
Excellent organizational skills and attention to detail, with the ability to manage multiple priorities, deadlines, and cross-functional projects.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications - Certifications &amp; Tools</h4><ul><li>
Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC, or similar are preferred.</li><li>
Experience supporting SOC 2 or ISO 27001 audits, or leading vendor risk and third-party assessment programs.</li><li>
Familiarity with cloud security controls and compliance in AWS, Azure, or GCP, and experience working with DevOps/engineering teams to embed controls into CI/CD pipelines.</li><li>
Prior experience with GRC platforms (e.g., RSA Archer, ServiceNow GRC, OneTrust, Drata) or automation of compliance evidence collection is a plus.</li></ul><h5 class="jobSectionHeader">
Work Environment &amp; Compensation</h5><ul><li>
Full-time position with an onsite work model.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, continuing education support, and assistance with certification costs.</li><li>
Collaborative and inclusive team culture committed to diversity, equity, and professional growth.</li></ul></div>

Information Security Compliance Analyst

M42 Health

<div>
 
 Overview
 
 
 
 M42 is a global health champion powered by artificial intelligence (AI), technology and genomics to advance innovation in health for people and the planet. Headquartered in Abu Dhabi, M42 combines its specialized, state-of-the-art facilities with integrated health solutions like genomics and biobanks, and harnesses advanced technologies to deliver precise, preventive and predictive care, to disrupt traditional healthcare models and positively impact lives globally.
 
 
 The role is responsible for developing, implementing, and maintaining an Information Security Framework, including policies, standards, and processes aligned with international best practices and regulatory requirements. The position plays a critical role in managing information security risks, ensuring regulatory compliance, overseeing security projects, responding to incidents, and strengthening security awareness across the organization. The role will also evaluate and supervise information security controls, develop security metrics, and build strong relationships with internal and external stakeholders to support M42&rsquo;s healthcare objectives.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Develop, implement, and maintain an enterprise-wide Information Security Framework aligned with international standards (e.g., ISO 27001, ISO 27701, HIPAA) and regulatory requirements (e.g., ADHICS, ADGM, GDPR, NESA).
 </li>
 <li>
 Define and execute the information security and compliance strategy in alignment with M42 objectives, recommending appropriate controls, tools, and technologies.
 </li>
 <li>
 Establish and operate a healthcare-focused information security risk management framework aligned with M42 enterprise risk management practices.
 </li>
 <li>
 Conduct technology risk assessments for new business initiatives and IT projects, including driving Risk Control Self-Assessments (RCSA).
 </li>
 <li>
 Ensure appropriate management visibility of security risks, including impact, mitigation plans, and associated costs.
 </li>
 <li>
 Perform regulatory gap analysis, industry benchmarking, and control maturity assessments to identify improvement opportunities.
 </li>
 <li>
 Develop, monitor, and report information security and IT risk metrics, including KRIs and KPIs.
 </li>
 <li>
 Lead the planning and delivery of information security initiatives and projects in line with regulatory and business requirements.
 </li>
 <li>
 Investigate, manage, and respond to information security and data privacy incidents, including maintaining and testing the incident response plan.
 </li>
 <li>
 Oversee the implementation, monitoring, and effectiveness of information security and IT controls across the healthcare environment.
 </li>
 <li>
 Coordinate with IT GRC, internal audit, and external audit teams to implement regulatory and audit recommendations.
 </li>
 <li>
 Manage regulatory submissions (including ADHICS) and remediate identified compliance gaps.
 </li>
 <li>
 Direct internal teams and external service providers to ensure the protection of information assets and adherence to security policies and standards.
 </li>
 <li>
 Build strong relationships with key stakeholders across M42 IT and Healthcare functions and represent Information Security in internal and external audits.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s or Master&rsquo;s degree in IT, Computer Science, Software Engineering, or a related field.
 </li>
 <li>
 5-10 years of professional experience in Information Security, with a minimum of 5 years within the healthcare industry.
 </li>
 <li>
 Proven experience in information security governance, risk management, compliance, and security operations.
 </li>
 <li>
 Strong knowledge of healthcare and data protection regulations (e.g., ADHICS, HIPAA, GDPR, HITRUST, DOH).
 </li>
 <li>
 Hands-on experience conducting technology risk assessments and Risk Control Self-Assessments (RCSA).
 </li>
 <li>
 Solid understanding of international security standards and frameworks (e.g., ISO 27001, ISO 27701).
 </li>
 <li>
 Experience working with cloud security architectures and cloud service models.
 </li>
 <li>
 Excellent written and verbal communication skills, with the ability to explain security and risk concepts to technical and non-technical audiences.
 </li>
 <li>
 Strong stakeholder management skills, including engagement with senior leadership, auditors, and regulators.
 </li>
 <li>
 Relevant industry certifications such as CISA, CISM, CISSP, CCSP, or cloud security certifications (Azure/AWS).
 </li>
 <li>
 Experience working in the UAE or similar regulated healthcare environments (preferred).
 </li>
 <li>
 ITIL v4 certification (preferred).
 </li>
 </ul>
</div>

Information Security, Senior Analyst

Gargash Group

<div>
 
 
 Job Purpose:
 
 
 
 
 
 
 The Senior Cybersecurity Analyst is responsible for safeguarding the group&rsquo;s information systems and sensitive data from cyber threats. This job is responsible for analysing complex security issues, implementing effective security measures, and providing guidance to team members.
 
 
 
 
 
 
 Responsibilities:
 
 
 
 
 
 
 &bull; Conduct in-depth analysis of security incidents, vulnerabilities, and breaches, providing timely and accurate reports to management.
 
 
 &bull; Collaborate with cross-functional teams to ensure that security measures are integrated into all aspects of the group&rsquo;s operations.
 
 
 &bull; Monitor and assess the group&rsquo;s network, systems, and applications for potential security risks and
 
 
 vulnerabilities.
 
 
 &bull; Perform penetration testing, vulnerability assessments, and security audits to identify weaknesses and recommend mitigation strategies.
 
 
 &bull; Design and implement advanced security controls to protect sensitive data and maintain regulatory compliance.
 
 
 &bull; Provide guidance and mentorship to junior cybersecurity team members, assisting with skill
 
 
 development and knowledge enhancement.
 
 
 &bull; Stay current with emerging threats, attack techniques, and industry trends to continuously improve the group&rsquo;s security posture.
 
 
 &bull; Lead incident response efforts, coordinating with relevant teams to contain, mitigate, and recover from security incidents.
 
 
 &bull; Collaborate with third-party vendors and partners to assess their security practices and ensure
 
 
 compliance with established standards.
 
 
 &bull; Participate in the evaluation and deployment of new cybersecurity technologies, tools, and solutions.
 
 
 &bull; Contribute to the development of security awareness training programs for employees to enhance their understanding of cybersecurity best practices.
 
 
 &bull; Prepare and deliver comprehensive reports and presentations to convey security-related information
 
 
 to technical and non-technical audiences, including senior management.
 
 
 &bull; Serve as an L3 Cybersecurity Engineer.
 
 
 &bull; Perform deep analysis of security incidents to identify the full kill chain.
 
 
 &bull; Create SOC/MDR related use cases and write detections.
 
 
 &bull; Act as a subject matter expert for any cyber alert or incident that occurs.
 
 
 &bull; Conduct L3 level investigations to determine the root cause of any cyber incident or alert.
 
 
 &bull; Work with blue team tools and solutions (EDR, XDR, SIEM, Email Security, DLP, DDoS, WAF, Proxy) and analyse security alerts generated by these tools.
 
 
 &bull; Create cybersecurity use cases for SOC.
 
 
 &bull; Perform malware analysis.
 
 
 &bull; Correlate different log sources and understand logs from various end devices, servers, network devices, and applications.
 
 
 &bull; Implement security solutions in collaboration with respective vendors.
 
 
 &bull; Conduct threat intelligence actions and investigations.
 
 
 &bull; Perform application security checks and reviews, implementing best application security controls.
 
 
 &bull; Manage cloud security for the group and work with cloud security tools (Microsoft Azure).
 
 
 &bull; Work on endpoint security.
 
 
 &bull; Review and manage access control from a security perspective.
 
 
 &bull; Implement security projects.
 
 
 &bull; Conduct in automation using scripting languages and programming to automate day-to-day tasks in cybersecurity, build AI bots, identify patterns in large datasets that could signify malicious activity, and use AI tools to proactively search for threats within a network.
 
 
 &bull; Uphold company values throughout business practices and utilise sound judgment in decision making.
 
 
 &bull; Any other additional duties as may be required by management based on needs of the business.
 
 
 
 
 
 
 Requirements:
 
 
 
 
 
 
 &bull; Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
 
 
 &bull; Certification in GIAC DFIR, Blue Team Level 1 and Blue Team Level 2 required.
 
 
 &bull; Relevant certifications (e.g., CISSP, CISM, CISA, CEH) are highly desirable.
 
 
 &bull; A minimum of 5-7 years of experience in a similar role in Cyber Security.
 
 
 &bull; Proven experience as a cybersecurity analyst or similar role, demonstrating progressive
 
 
 responsibilities.
 
 
 &bull; Experience with AI-based cybersecurity tools including Darktrace, Security Copilot, SOAR, Next-gen SIEM, CrowdStrike, AI-based Threat Intel, and Microsoft Security deployment (Defender, Purview DLP,IAM).
 
</div>

Senior Cybersecurity Analyst

Zain

<div>About the Role 
The Information security job involves assessing the effectiveness of Information Security policies and pointing out vulnerabilities or lack of controls to mitigate a given risk and co-manage Business Continuity Plans. The security analyst will work with every department in the company to make recommendations for improvements and craft detailed design documents for them to implement. This job involves project management and It will also involve Information Security Administrator responsibilities.<ul><li>
Ensure the widespread support of and compliance with information security requirements.</li><li>
Administration and management of IT security Solutions (Hardware, Software) such as Servers, Firewalls, Network Devices, IPS, operating systems, Security Applications, Scanners.</li><li>
Perform various tests and penetration testing on systems and Zain's network ( LAN/WAN, and telecommunications) to capture vulnerabilities and to suggests corrective actions, so that those systems and networks is not interrupted..
</li><li>Make sure that all business applications include adequate security control measures.</li><li>
Be an in-house expert who assists with the improvement of security on information systems.
</li><li>Execute detailed Information Security audit procedures.
</li><li>To test, maintain, and follow up on all the information security systems and its alarms and incidents for a better availability.
</li><li>Acts as a technical consultant on information security incident investigations, forensic technical analyses, and possibility of data recovery.</li><li>
Implement Security Awareness Sessions for Zain employees.</li><li>
Analyze logs kept by computer and network access control systems to detect attempts at unauthorized use, and notifies the Information Security Team Leader as necessary.</li><li>
Provide business and technical advice and recommendations on a wide variety of information security issues, concerns, and problems</li><li>
Audit access control requests to make sure that only proper access is given to the proper individual as per the business needs.</li><li>
Audit newly installed equipment that are added to the network to make user that they comply with security requirements. Also to make sure that such new installation does not effect the live network.</li><li>
To be involved (co-manage) in the implementation of the ISO 27001, PCI and similar compliance audits and certifications.</li><li>
Lead Internal/External penetration tests and risk assessment exercises.</li><li>
Be aware of, and adhere to, all environmental requirements as set by the statutory bodies in Kuwait, or by the published policies of Zain Group/Kuwait.</li><li>
Apart from his/her job responsibilities, The Information Security Analyst will also perform the responsibilities of the IS Administrator when necessary.</li></ul>
To perform all the above-mentioned roles and responsibilities in compliance to the Information Security Management System (ISMS) policies, and to report any information/physical security breaches or incidents to Data Control Department immediately. Also to ensure that all team members are following mentioned policies.
What We Need From You<ul><li> 
Security ownership (Treat security issues as their responsibility not someone else's)</li><li>
Risk-based thinking (Understanding severity of security issues, knows how to document risk)</li><li>
Clear and calm communication (Able to explain security issues to non-technical people, stay composed during incidents)</li><li>
Continuous learning and curiosity (Actively keep up with latest threats and trends, able to think in place of bad actors)</li><li>
Integrity (handles sensitive access and data ethically, escalates security issues instead of hiding them)</li></ul>
Bachelor's Degree
Computer Science, Computer Engineering, Cybersecurity, MIS or any security relevant major</div>

Information Security

Zain Kuwait

<div>
 
 About The Role
 
 
 
 The Information security job involves assessing the effectiveness of Information Security policies and pointing out vulnerabilities or lack of controls to mitigate a given risk and co-manage Business Continuity Plans. The security analyst will work with every department in the company to make recommendations for improvements and craft detailed design documents for them to implement. This job involves project management and It will also involve Information Security Administrator responsibilities.
 
 
 <ul>
 <li>
 Ensure the widespread support of and compliance with information security requirements.
 </li>
 <li>
 Administration and management of IT security Solutions (Hardware, Software) such as Servers, Firewalls, Network Devices, IPS, operating systems, Security Applications, Scanners.
 </li>
 <li>
 Perform various tests and penetration testing on systems and Zain's network ( LAN/WAN, and telecommunications) to capture vulnerabilities and to suggests corrective actions, so that those systems and networks is not interrupted..
 </li>
 <li>
 Make sure that all business applications include adequate security control measures.
 </li>
 <li>
 Be an in-house expert who assists with the improvement of security on information systems.
 </li>
 <li>
 Execute detailed Information Security audit procedures.
 </li>
 <li>
 To test, maintain, and follow up on all the information security systems and its alarms and incidents for a better availability.
 </li>
 <li>
 Acts as a technical consultant on information security incident investigations, forensic technical analyses, and possibility of data recovery.
 </li>
 <li>
 Implement Security Awareness Sessions for Zain employees.
 </li>
 <li>
 Analyze logs kept by computer and network access control systems to detect attempts at unauthorized use, and notifies the Information Security Team Leader as necessary.
 </li>
 <li>
 Provide business and technical advice and recommendations on a wide variety of information security issues, concerns, and problems
 </li>
 <li>
 Audit access control requests to make sure that only proper access is given to the proper individual as per the business needs.
 </li>
 <li>
 Audit newly installed equipment that are added to the network to make user that they comply with security requirements. Also to make sure that such new installation does not effect the live network.
 </li>
 <li>
 To be involved (co-manage) in the implementation of the ISO 27001, PCI and similar compliance audits and certifications.
 </li>
 <li>
 Lead Internal/External penetration tests and risk assessment exercises.
 </li>
 <li>
 Be aware of, and adhere to, all environmental requirements as set by the statutory bodies in Kuwait, or by the published policies of Zain Group/Kuwait.
 </li>
 <li>
 Apart from his/her job responsibilities, The Information Security Analyst will also perform the responsibilities of the IS Administrator when necessary.
 
 
 </li>
 </ul>
 To perform all the above-mentioned roles and responsibilities in compliance to the Information Security Management System (ISMS) policies, and to report any information/physical security breaches or incidents to Data Control Department immediately. Also to ensure that all team members are following mentioned policies.
 
 
 What We Need From You
 
 
 <ul>
 <li>
 Security ownership (Treat security issues as their responsibility not someone else&rsquo;s)
 </li>
 <li>
 Risk-based thinking (Understanding severity of security issues, knows how to document risk)
 </li>
 <li>
 Clear and calm communication (Able to explain security issues to non-technical people, stay composed during incidents)
 </li>
 <li>
 Continuous learning and curiosity (Actively keep up with latest threats and trends, able to think in place of bad actors)
 </li>
 <li>
 Integrity (handles sensitive access and data ethically, escalates security issues instead of hiding them)
 
 
 </li>
 </ul>
 Bachelor&rsquo;s Degree
 
 
 Computer Science, Computer Engineering, Cybersecurity, MIS or any security relevant major
 
 
 
 About Application Process
 
 
 
 If you meet the criteria and you are enthusiastic about the role, we would welcome your application. To complete the application you would need the following document(s):
 
 
 <ul>
 <li>
 Resume/CV
 </li>
 <li>
 Passport-size photograph
 </li>
 <li>
 Highest Education Qualification
 </li>
 <li>
 Copy of Civil ID/Passport
 </li>
 </ul>
</div>

ZAIN2172 - Information Security

Search 10000+ Information security analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 information security analyst jobs NEAR_ME

Information Security Analyst

Information Security Analyst

Information Security Compliance Analyst

Information Security, Senior Analyst

Senior Cybersecurity Analyst

Information Security

ZAIN2172 - Information Security