it security analyst

SF Recruitment

<p>IT Security Analyst with experience monitoring and analysing security threats is sought by a high growth scale up based South Birmingham. Working at the forefront of national security innovation this IT Security Analyst will work closely with within the in-house cyber security team to monitor and triage security alerts alongside assist in vulnerability protection ensuring a high level of cyber protection for this scaling business. This role would suit a IT security Analyst with a couple of years commercial experience who is looking for excellent training, a clear progression pathway and scope to utilise the latest technology to deliver solutions of national significance. This IT Security Analyst based near Birmingham should have most of the following key skills: - At least two years commercial info sec or cyber experience - Root cause analysis skills - A real passion for cyber - Experience creating and maintaining incident logs - strong communication skills with the ability to articulate complex technical concepts to senior non-technical stakeholders - Experience working in a scale up or SME environment would be advantageous - A positive, engaging personality with no ego but the resolve to challenge and question existing process the norm when required This IT Security Analyst based near Birmingham will receive - Generous starting salary - Flexible working - Extensive personal development scheme - 25 days holiday - 10% private pension scheme - Bonus - Private healthcare - Truly autonomous, collaborative culture with extensive growth potential - Regular remuneration reviews So if you are an IT Security Analyst who wants to join a market leading business with innovation at its core please apply now to be considered Birmingham Cyber, information security, cyber essentials, defence, incident logs</p>

IT Security Analyst

<div><p><b>Position Type :
</b></p>Full time<p><b>
Type Of Hire :
</b></p>Experienced (relevant combo of work and education)<p><b>
Education Desired :
</b></p>Bachelor of Computer Science<p></p><p><b>
Job Description</b></p><p>
FIS Management Services, LLC seeks IT Security Analyst Seniors &ndash; Cyber Threat Hunting in Jacksonville, FL to be responsible for leveraging specialized knowledge of FIS technologies to execute security controls to prevent hackers from infiltrating company information or jeopardizing programs. Research attempted efforts to compromise security protocol and recommend solutions. Utilize advanced knowledge of proprietary tools to maintain security systems and administer security policies to control access to systems. Maintain company firewall and utilize applicable encryption methods. Apply expertise with FIS technology to create information security documentation related to work area and complete requests in accordance with company requirements. Respond to information security-related questions and inquiries using established information security tools and procedures. Leverage unique knowledge of proprietary methodologies to find solution and perform follow through to resolve all information security issues and questions. Utilize specialized understanding of proprietary technologies to implement and administer information security controls using software and vendor security systems. Apply unique expertise of FIS tools to identify opportunities and execute plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management. Leverage specialized knowledge of FIS methodologies to interface with user community to understand security needs and implement procedures to accommodate them. He will ensure that user community understands and adhere to necessary procedures to maintain security. Apply unique expertise with FIS methodologies to provide status reports on security matters to develop security risk analysis scenarios and response procedures.</p><p></p><p>
REQUIREMENTS: Bachelor&rsquo;s degree or foreign equivalent in Computer Engineering, Computer Science or related field and four (4) years of experience in the job offered or a related occupation: scrutinizing and interpreting data patterns; recognizing anomalies and connecting disparate pieces of data to identify potential threats; utilizing security tools including Splunk, QRadar for Security Information and Event Management (SIEM) systems, intrusion detection systems (IDS), and endpoint detection and response (EDR) solutions; identifying and neutralizing threats ensuring the organization remains secure; utilizing languages including Python, PowerShell, and Bash for automation and analysis; and performing threat hunting, network traffic analysis, and user behavior analysis. Telecommuting and/or working from home may be permissible pursuant to company policies.</p><p></p><p>
QUALIFIED APPLICANTS: Please apply directly through our website by clicking on &ldquo;Apply Now.&rdquo;</p><p></p><p><b><br>
Privacy Statement</b></p><p></p><p>
FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.</p><p></p><p><b>
EEOC Statement</b></p><p></p><p>
FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here</p><p><br>
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.</p><p></p><p><b>
Sourcing Model</b></p><p></p><p>
Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.</p><p></p><p>
#pridepass</p></div>

IT Security Analyst Seniors – Cyber Threat Hunting

Road and Transport, RTA Dubai

<br>Job Title<br>Information Security Analyst - Roads and Transport Authority Dubai<br>Job Description<br>Information Security Analyst - Roads and Transport Authority Dubai<br> <br>Job Location: Dubai, United Arab Emirates<br>Industry: Government Administration<br>Function: Cyber security<br>Gender: Any<br>Candidate Nationality: All Nationalities (Priority for UAE Nationals)<br>Job Type: Full-time<br> <br>Position Overview<br>The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization.<br> <br>What You ll Do<br> <br>* Identify, recommend, and implement corrective actions in response to security violations<br>* Conduct vulnerability research and recommend remediation plans<br>* Analyze and test security controls for compliance with ISO27001, ISR, and other regulations<br>* Perform security assessments to identify vulnerabilities in systems and applications<br>* Monitor, analyze, and escalate security events from incident response queues<br>* Create and maintain IT security standard operating procedures and configuration reports<br>* Conduct technical analysis of malware, intrusion attempts, and system logs<br>* Provide guidance on authentication and access systems aligned with security architecture requirements<br>* Develop and maintain security policies, standards, and procedures to protect information assets<br>* Support IT security awareness programs and assist with staff training initiatives<br>* Perform continuous risk assessments and ensure ongoing compliance with standards<br>* Collaborate with teams to ensure effective incident response and implement best practices<br> <br>Ideal Profile<br> <br>* Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university<br>* Minimum of 3 years of relevant experience in IT security or related fields<br>* Preferred certifications: CISSP, CISM, CISA, GIAC<br>* Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing<br>* Strong project management and analytical skills<br>* Excellent communication and interpersonal abilities<br>* Ability to adapt to multicultural environments and manage multiple priorities effectively<br><br>

Information Security Analyst

<br><b>Job Title<br></b>Information Security Analyst - Roads and Transport Authority Dubai<br>Job Description<br>Information Security Analyst - Roads and Transport Authority Dubai<br> <br>Job Location: Dubai, United Arab Emirates<br>Industry: Government Administration<br>Function: Cyber security<br>Gender: Any<br>Candidate Nationality: All Nationalities (Priority for UAE Nationals)<br>Job Type: Full-time<br> <br><b>Position Overview<br></b>The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization.<br> <br><b>What You ll Do<br></b> <br>* Identify, recommend, and implement corrective actions in response to security violations<br>* Conduct vulnerability research and recommend remediation plans<br>* Analyze and test security controls for compliance with ISO27001, ISR, and other regulations<br>* Perform security assessments to identify vulnerabilities in systems and applications<br>* Monitor, analyze, and escalate security events from incident response queues<br>* Create and maintain IT security standard operating procedures and configuration reports<br>* Conduct technical analysis of malware, intrusion attempts, and system logs<br>* Provide guidance on authentication and access systems aligned with security architecture requirements<br>* Develop and maintain security policies, standards, and procedures to protect information assets<br>* Support IT security awareness programs and assist with staff training initiatives<br>* Perform continuous risk assessments and ensure ongoing compliance with standards<br>* Collaborate with teams to ensure effective incident response and implement best practices<br> <br><b>Ideal Profile<br></b> <br>* Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university<br>* Minimum of 3 years of relevant experience in IT security or related fields<br>* Preferred certifications: CISSP, CISM, CISA, GIAC<br>* Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing<br>* Strong project management and analytical skills<br>* Excellent communication and interpersonal abilities<br>* Ability to adapt to multicultural environments and manage multiple priorities effectively<br><br>

Information Security Analyst - Roads and Transport Authority

Momentive Performance Materials

<div><div>Job Title:</div><div></div>
Lead Analyst - IT Global ERP Security &amp; Compliance<div></div><div>
Summary:</div>
This position works closely with ERP IT project teams and business process owners to deliver secure, efficient, and timely ERP security solutions. It plays a critical role in ensuring Momentive&rsquo;s ERP Segregation of Duties (SoD) framework remains compliant with SOX regulations. Additionally, the role involves active collaboration with other IT security teams to support a unified defense strategy aligned with the broader goals of enterprise IT security.<div></div><div>
Responsibilities Include:</div><ul><li>
Develop and implement enterprise-wide ERP/SAP security strategies, policies, and standards.</li><li>
Collaborate with ERP IT teams and business to design role-based access control and segregation of duties (SoD) frameworks.</li><li>
Manage user administration, single sign-on (SSO), and other advanced security measures.</li><li>
Oversee user provisioning, access requests, and role management.</li><li>
Conduct regular reviews of user roles and permissions to ensure proper access controls.</li><li>
Ensure compliance with industry standards, regulatory requirements (e.g., SOX, etc), and organizational policies.</li><li>
Conduct internal and external audits, documenting findings and recommendations as per the demands from Internal and External Audit teams.</li><li>
Implement and maintain ERP GRC (Governance, Risk, and Compliance) solutions for monitoring and reporting.</li><li>
Work closely with IT teams, business, and audit teams to align SAP security goals with organizational objectives.</li><li>
Act as a liaison between stakeholders to address security concerns and propose solutions.</li><li>
Investigate ERP security incidents/requests, determine root causes, and implement corrective actions.</li><li>
Provide IT security teams with training on SAP/ERP-specific threats, such as SoD conflicts, advanced access controls, user access reviews.</li><li>
Collaborate with IT security to identify the root cause of incidents, whether it's misconfigured access, phishing attacks, or malware.</li><li>
Establish a regular cadence of meetings or updates with IT security teams to discuss emerging threats, incidents, and proactive measures.</li><li>
Perform risk analysis to determine the potential impact of threats involves a structured approach to identifying, assessing, and prioritizing risks to an organization's information systems</li><li>
Conduct security awareness simulations such as phishing assessments to help employees understand potential threats, recognize attack methods.</li><li>
Support the governance aspect of the NIST Cybersecurity Framework by ensuring that cybersecurity policies, procedures, and strategies align with organizational goals and risk management practices.</li><li>
Stay updated on emerging SAP security threats, trends, and technologies.</li><li>
Identify opportunities to enhance SAP security measures and lead their implementation.</li><li>
Provide training and knowledge-sharing sessions for IT and business users.</li><li>
Excellent communication and leadership skills to interact with diverse teams.</li></ul><div></div><div>
Qualifications:</div><div>
The following are <i>required </i>for the role</div><ul><li>
7-12 years of ERP Security Administration experience including ECC R/3, BW, PI, PLM, Portal and GRC 10.1 or similar in SAP Security</li><li>
Proven expertise in SAP/ERP GRC modules, risk analysis, and access control.</li><li>
Bachelor of Science in Computer Information Systems, Information Technology or related field.</li></ul><div></div><div>
Preferred qualifications</div><ul><li>
External compliance standards/regulations (i.e., SOX) experience.</li><li>
Understanding of audit processes, procedures and IT internal control frameworks/structures.</li><li>
SAP/ERP Certified Technology Associate &ndash; SAP Security and Authorizations.</li><li>
Knowledge of other IT security systems that integrate with SAP, such as Identity and Access Management (IAM) or SIEM (Security Information and Event Management) tools.</li><li>
CISSP, CISM, or other relevant security certifications.</li></ul><div></div><div>
#LI-Hybrid</div><div></div><div>
What We Offer:</div><div>
At Momentive, we value your well-being and offer competitive total rewards and development programs. Our inclusive culture fosters a strong sense of belonging and provides diverse career opportunities to help you unleash your full potential. Together, through innovative problem-solving and collaboration, we strive to create sustainable solutions that make a meaningful impact. Join our Momentive team to open a bright future. <i>#BePartoftheSolution</i></div><div></div><div>
About Us:</div><div><div><div>
Momentive is a premier global advanced materials company with a cutting-edge focus on silicones and specialty products. We deliver solutions designed to help propel our customer&rsquo;s products forward&mdash;products that have a profound impact on all aspects of life, around the clock and from living rooms to outer space. With every innovation, Momentive creates a more sustainable future. Our vast product portfolio is made up of advanced silicones and specialty solutions that play an essential role in driving performance across a multitude of industries, including agriculture, automotive, aerospace, electronics, energy, healthcare, personal care, consumer products, building and construction, and more.</div></div><div></div><div><div><br>
Momentive believes a diverse workforce empowers our people, strengthens our business, and contributes to a sustainable world. We are proud to be an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any characteristic protected by law.</div></div><div></div><div><div><br>
To be considered for this position candidates are required to submit an application for employment and be of legal working age as defined by local law. An offer may be conditioned upon the successful completion of pre-employment conditions, as applicable, and subject to applicable laws and regulations.</div></div><div></div><div><div><br>
Note to third parties: Momentive is not seeking or accepting any unsolicited assistance from search and selection firms or employment agencies at this time.</div></div></div></div>

Lead Analyst - IT Global ERP Security & Compliance

Zones IT Solutions

<div>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 Company Overview:
 <br/>
 <br/>
 When it comes to IT solution providers, there are a lot of choices. But when it comes to providers with innovative and differentiating end-to-end service offerings, there&rsquo;s really only one: Zones &ndash; First Choice for IT.TM
 <br/>
 <br/>
 Zones is a Global Solution Provider of end-to-end IT solutions with an unmatched supply chain. Positioned to be the IT partner you need, Zones, a Minority Business Enterprise (MBE) in business for over 35 years, specializes in Digital Workplace, Cloud &amp; Data Center, Networking, Security, and Managed/Professional/Staffing services. Operating in more than 120 countries, leveraging a robust portfolio, and utilizing the highest certification levels from key partners, including Microsoft, Apple, Cisco, Lenovo, Adobe, and more, Zones has mastered the science of building digital infrastructures that change the way business does business ensuring whatever they need, they can Consider IT Done. Follow Zones, LLC on Twitter @Zones, and LinkedIn and Facebook.
 <br/>
 <br/>
 <strong>
  Position Overview
  <br/>
  <br/>
 </strong>
 As the Information Security Analyst - Compliance &amp; Risk Management, you will analyze management and technical controls to ensure compliance with security requirements. This includes mapping regulatory and security requirements across the information security framework and tracking enterprise compliance across multiple security frameworks. You will also assist internal teams in preparing for internal and external assessments and audits, collaborate on critical IT projects to address security policy and risk issues, and develop key performance metrics to track and ensure compliance with policies and standards.
 <br/>
 <br/>
 What you&rsquo;ll do as the Information Security Analyst &ndash; Compliance &amp; Risk Management:
 <br/>
 <br/>
 Employees employed in the role of Information Security Analyst &ndash; Compliance &amp; Risk Management shall be required to apply their independent minds and demonstrate intellectual abilities in their decision-making.
 <br/>
 <br/>
 The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
 <br/>
 <br/>
 <ul>
  <li>
   Analyze management and technical controls to ensure specific security and compliance requirements are met.
  </li>
  <li>
   Map regulatory/security requirements across the information security framework.
  </li>
  <li>
   Track enterprise compliance across multiple security frameworks including ISO27001, 27701, SOC2, GDPR, and PCI-DSS, maintaining up-to-date records of requirements and corresponding mitigating controls.
  </li>
  <li>
   Help internal teams with readiness for internal/external assessments/audits against industry standards and review programs/documentation for conformance.
  </li>
  <li>
   Collaborate on critical IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle.
  </li>
  <li>
   Develop key performance metrics to track and ensure compliance with established policies and standards.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You Will Bring To The Team
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5-7 years of information security experience.
  </li>
  <li>
   Experience with ISO 27001, SOC 2, and PCI-DSS compliance.
  </li>
  <li>
   Strong communication skills (verbal and written).
  </li>
  <li>
   Ability to meet deadlines and work under pressure.
  </li>
  <li>
   Experience of working in US-based multinational organizations is a plus.
  </li>
  <li>
   Security certifications such as CISSP/CISA, ISO27001.
  </li>
  <li>
   Extensive experience with auditing vendors/service providers/partners for compliance with security.
  </li>
  <li>
   Experience of working extensively with the Engineering teams (system admin, network admin, security admin, application teams) to effectively communicate the compliance requirements
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Science or Information Technology.
   <br/>
   <br/>
  </li>
 </ul>
 Zones offers a comprehensive Benefits package
 <br/>
 <br/>
 At Zones, we are committed to fostering an inclusive and diverse workplace where every team member is valued and supported. We offer life insurance, optional health insurance, and retirement benefits in line with Company policy. Employees also enjoy additional perks such as the Voluntary Pension Scheme, EOBI, complimentary meals, and access to our in-house gym.
 <br/>
 <br/>
 We take pride in being an equal opportunity employer and remain dedicated to maintaining a workplace free from discrimination of any kind. If you are passionate about driving innovation in IT, sales, engineering, or operations, Zones provides a dynamic and collaborative environment to help you grow your career.
 <br/>
 <br/>
 All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability.
 <br/>
 <br/>
 Job timings: 08:00 PM to 05:00 AM (Pk time)
</div>


Information Security Analyst – Compliance & Risk Management

Tabby

<div><h3 class="jobSectionHeader"><b>Description</b></h3><div><br>
The IT Risk Analyst will identify, assess, and monitor IT and cybersecurity risks, develop mitigation strategies, and ensure compliance with regulations.</div><h3 class="jobSectionHeader"><b><br>
Key Responsibilities</b></h3><br>
<ul>
<li>
<b>Risk assessment and analysis</b>: Identify and evaluate IT system and process risks, including cybersecurity threats, vulnerabilities, and potential consequences.</li>
<li><b>Strategy and mitigation</b>: Develop and implement risk management policies, procedures, and security protocols, such as firewalls and data encryption.</li>
<li><b>Monitoring and reporting</b>: Track and monitor risk activities, investigate security incidents, and prepare reports on key metrics and findings for stakeholders.</li>
<li><b>Compliance and governance</b>: Ensure compliance with regulatory standards and advise on internal controls to improve the organization's risk posture.</li>
<li><b>Collaboration</b>: Work with other IT personnel and stakeholders to manage security needs and communicate findings, risks, and recommendations.</li>
<li><b>Awareness</b>: Build understanding and awareness of cybersecurity risks throughout the organization.</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Skills, Knowledge &amp; Expertise</b></h3><br>
<div></div><ul><li>
Strong risk management and analysis background</li>
<li>Cybersecurity principles and incident response</li>
<li>Experience in IT audit and internal controls</li>
<li>Experience with Governance, Risk, and Compliance (GRC) frameworks (e.g., ISO 27001)</li>
<li>Proficiency in Data analysis tools (e.g., SQL, Excel)</li>
<li>Skilled in Python for scripting and automation</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Good communication and presentation skills</li>
<li>Critical thinking</li>
<li>Ability to work collaboratively with diverse teams</li>
<li>Adaptability to a constantly evolving threat landscape</li></ul><br>
<h3 class="jobSectionHeader"><b>
About Tabby</b></h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money.<br>
<br>
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.<br>
<br>
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region.<br>
<br>
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

IT Risk Analyst

Search 10000+ It security analyst jobs near you this November. New roles added regularly across leading industries. Apply today.