senior cyber security analyst

Oman Arab Bank

<div>
 <p>
  <strong>
   <u>
    Purpose and Summary
   </u>
   :
  </strong>
 </p>
 <ul>
  <li>
   To primarily ensure Bank acts in accordance with its internal policies, external compliance requirements, and risk appetite through the alignment of strategy with organizational objectives.
  </li>
  <li>
   To ensure the operational environment remains secured, managing risk to acceptable level by analyzing risk probability, impact and prioritizing control implementation.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Key Deliverables:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Develop, implement, and maintain Information Security policies, standards, and frameworks in line with regulatory demands and new international standard practices.
  </li>
  <li>
   Overseeing Information Security compliance to ensure adherence to the bank&rsquo;s security policies and standards.
  </li>
  <li>
   Preparing MIS Trackers, Reports and Dashboards for the management.
  </li>
  <li>
   Perform Information security risk assessment against industry standard security framework/policies for IT/IS risks
  </li>
  <li>
   Document, Approve and Progress the Implementation of the Information Security Awareness Program Employees &amp; Customers.
  </li>
  <li>
   Develop and report on program execution KPIs to the ISWG (IS workgroup) on monthly, quarterly and annual basis.
  </li>
  <li>
   Maintain the CBO, SWIFT &amp; PCI-DSS compliance tracking. Produce the reports and dashboard. Ensure to share the report and dashboard with the ISWG (IS Workgroup) on monthly basis. Ensure timely closure, escalation of the action items and track / record activities in auditable format
  </li>
  <li>
   Report any violation to approved security policies and provide recommendations.
  </li>
  <li>
   Logs all InfoSec related Incidents and track for closure of the incidents and maintain risk register.
  </li>
  <li>
   Conduct research and gain awareness of latest information security trends.
  </li>
  <li>
   Liaise with different entities on security events or global threats.
  </li>
  <li>
   Liaise with different team members to deploy security controls recommended by vendors and by Information security team.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Qualifications
   </u>
   :
  </strong>
 </p>
 <ul>
  <li>
   Degree in Information Security/IT or equivalent.
  </li>
  <li>
   Preferred Professional Information Security Certification or equivalent.
  </li>
  <li>
   ITIL v3(Information Technology Information Library)
  </li>
  <li>
   ISO/IEC 2013:27001 Lead Implementer
  </li>
  <li>
   ISO/IEC 2013:27001 Lead Implementer
  </li>
  <li>
   CEH (Certified Ethical Hacking)
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Skills/Knowledge
   </u>
   :
  </strong>
 </p>
 <ul>
  <li>
   Leadership Skills
  </li>
  <li>
   Effective Communication skills.
  </li>
  <li>
   Strong Risk Analysis skills.
  </li>
  <li>
   Attention to Details.
  </li>
  <li>
   Problem-Solving skills.
  </li>
  <li>
   Coordination skills.
  </li>
  <li>
   Teamwork skills.
  </li>
  <li>
   Reporting skills.
  </li>
  <li>
   Research skills
  </li>
  <li>
   Assessment skills.
  </li>
  <li>
   Sound Arabic &amp; English Languages skills.
  </li>
 </ul>
 <p>
  <strong>
   <u>
   </u>
  </strong>
 </p>
 <p>
  <strong>
   <u>
    Experience
   </u>
   :
  </strong>
 </p>
 <ul>
  <li>
   5 to 8 years of relevant experience.
  </li>
 </ul>
 <p>
 </p>
</div>


Senior Cyber Security GRC Analyst

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
<br><div><h2 class="jobSectionHeader"><b>About Cyber Force</b></h2>
<p>
Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.</p>
<h2 class="jobSectionHeader"><b>
Role Overview</b></h2>
<p>
We are looking for a Junior Cyber Defense Operations Analyst to join our Threat Detection &amp; Response team as a frontline defender. You will monitor, triage, and investigate security alerts across SIEM, EDR, and XDR platforms, perform initial incident analysis, escalate confirmed threats, and maintain shift-based coverage for our managed services clients and on-site engagements. You will also leverage AI-augmented tooling and agentic SOC capabilities that Cyber Force is actively building into its detection and response workflows.</p>
<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2>
<ul><li>Monitor security alerts from SIEM (Elastic SIEM, Microsoft Sentinel), EDR/XDR (Defender XDR) across client environments</li>
<li>Triage and investigate alerts: analyze log data, correlate events, identify IOCs, determine true vs. false positives</li>
<li>Perform initial incident response: collect artifacts, preserve evidence, escalate to Tier 2/3 with structured handoff</li>
<li>Execute detection playbooks aligned with MITRE ATT&amp;CK</li>
<li>Analyze network traffic, endpoint telemetry, and identity/authentication logs</li>
<li>Maintain shift logs, case notes, and client-facing incident reports to SLA standards</li>
<li>Contribute to detection engineering: propose rule improvements, tune thresholds</li>
<li>Leverage AI-augmented tooling and LLM-based tools (Claude, ChatGPT) for alert enrichment and report drafting</li>
<li>Validate AI-generated investigation outputs from agentic SOC capabilities</li>
<li>Participate in purple team exercises and continuous training</li>
</ul><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>0&ndash;1 year experience in SOC, cyber defense, or IT security (internships, labs, CTFs count)</li>
<li>At least one cert: CompTIA Security+, CySA+, BTL1, ISACA CCOA, or equivalent</li>
<li>Fluent English (written and spoken)</li>
<li>Foundational knowledge of SIEM, EDR/XDR, and log analysis</li>
<li>Networking fundamentals: TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs</li>
<li>Familiarity with MITRE ATT&amp;CK and common adversary TTPs</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Willingness to work rotating shifts (24/7 coverage) and deploy to client sites</li>
<li>Elastic, Microsoft Sentinel, or Defender XDR experience &mdash; a strong plus</li>
<li>VICI VCDA (Viridian Certified Defense Associate) certification &mdash; a plus</li>
<li>French language skills &mdash; a plus</li></ul></div>
<br><div><h4 class="jobSectionHeader"><b>Role details</b></h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior Cyber Defense Operations Analyst

Commercial Bank of Dubai

<div>Dubai, Dubai, AE Management Permanent ID: 100251</div>
<br><div><div><div><div><h3 class="jobSectionHeader"><b>DESCRIPTION</b></h3>
<div><p><b>Job Purpose:</b></p><p>
The role is responsible for monitoring, analysing, and responding to security events and incidents to ensure timely detection and containment of threats. It ensures the effective implementation and continuous improvement of security controls aligned with regulatory requirements, industry standards, and organizational policies. The Senior IT Security Analyst supports vulnerability management, threat intelligence, and risk assessments to strengthen the overall security posture. The role collaborates closely with IT, business, and third‑party stakeholders to embed security best practices across systems, applications, and processes. It provides expert guidance during security investigations, audits, and regulatory inspections, ensuring accurate reporting and compliance. The position contributes to security architecture reviews, change management, and project initiatives to ensure security-by-design principles are applied.</p><p><b>
Principal Accountabilities:</b></p><ul><li>
Monitor, analyze, and investigate security events and alerts using SIEM, EDR, NDR, and other security platforms.</li><li>
Lead incident response activities, including containment, eradication, root cause analysis, and post‑incident reporting.</li><li>
Perform vulnerability assessments and coordinate remediation activities with infrastructure, application, and operations teams.</li><li>
Conduct regular security risk assessments and support risk treatment plans aligned with business objectives.</li><li>
Ensure implementation and effectiveness of security controls in line with ISO 27001, NIST, PCI DSS, and regulatory requirements.</li><li>
Support internal, external, and regulatory audits by providing evidence, explanations, and corrective action tracking.</li><li>
Analyze threat intelligence feeds and emerging cyber threats to proactively enhance detection and prevention capabilities.</li><li>
Review security architecture, system designs, and change requests to ensure security‑by‑design principles are applied.</li><li>
Manage and tune security tools and technologies to improve detection accuracy and reduce false positives.</li><li>
Coordinate with SOC, IT operations, and third‑party service providers on security monitoring and incident handling (as Level 3).</li><li>
Develop and maintain security procedures, playbooks, and standard operating procedures (SOPs).</li><li>
Support data protection and information classification initiatives, including security monitoring and incident handling.</li><li>
Perform periodic access reviews, privileged access monitoring, and support identity and access management controls.</li><li>
Track, report, and trend security metrics, incidents, and risk indicators for management and governance forums.</li><li>
Support business continuity, disaster recovery, and cyber resilience planning from a security perspective.</li><li>
Provide security guidance and awareness to IT and business teams to promote secure practices.</li></ul></div></div></div></div></div>
<br><div><div><div><div><h3 class="jobSectionHeader"><b>REQUIREMENTS</b></h3>
<div><p><b>Education and Experience</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, Information Technology, Information Systems, or related discipline.</li><li>
Equivalent professional experience may be considered in lieu of formal education where applicable.</li><li>
CISSP, CISM, CISA, or equivalent internationally recognized cyber security certification.</li><li>
Vendor‑specific security certifications (e.g., EDR, SIEM, Firewall, Cloud Security) are highly desirable.</li><li>
Minimum 5&ndash;8 years of hands‑on experience in IT Security Operations, Cyber Security, or Information Security roles.</li></ul></div></div></div></div></div><p></p>

Senior IT Security Analyst ( UAE National )

Duke Energy

<div><p><b>Important Application Submission Information</b></p>
In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Thursday, May 28, 2026<p></p><h2 class="jobSectionHeader"><b>
More than a career - a chance to make a difference in people's lives.</b></h2><p></p><p>
Build an exciting, rewarding career with us &ndash; help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.</p><p></p><p>
This is the third level of the Ops Cybersecurity Analyst classification hierarchy. Employees at this level solve more complex problems, in multiple areas of specialization, with general supervision. Incumbents are expected to develop advanced skills and the ability to work with greater independence. They effectively apply fundamental concepts and procedures to work that are complex and varied. This position is a member of the Duke Energy Nuclear Cyber Security fleet team and is physically located at McGuire Nuclear Station (MNS) in Huntersville, NC. Reporting to the fleet Cyber Security organization, this analyst serves as the primary cyber security resource supporting MNS while also contributing to fleet-wide initiatives across Duke Energy's nuclear generating stations (2 states, 6 sites) and Nuclear General Office (NGO).</p><p>
This role comprises the responsibilities for cybersecurity governance, risk management, and operational technology support within Duke Energy's cybersecurity operational business units. Where applicable, the position will ensure compliance with various cybersecurity standards and requirements such as: IT503, IT505, CS 220, NERC CIP, NIST CSF, NIST 800, NARUC, TSA, and NRC 10 CFR 73.54. The analyst will lead the development, support, and ongoing strategy of their business unit&rsquo;s cybersecurity program, focusing on governance and oversight and/or support and performance tasks.</p><p>
The Nuclear Cyber Security organization provides direct service and support to all nuclear generating stations to ensure compliance with the Nuclear Regulatory Commission (NRC) regulated Duke Energy Nuclear Cyber Security Plan and requirements. This includes response to cyber security threats and events, implementing the cyber security program, and ongoing management of the cyber security program. The cyber security program encompasses all infrastructure assets including, but not limited to, firewalls, data diodes, SIEM, industrial control systems (ICS), and other digital assets scoped into the program.</p><p>
This position is responsible for the analysis and implementation of complex cyber security solutions that address real and potential threats specific to nuclear generation assets and equipment at MNS. The analyst will coordinate across the station and with NGO to ensure nuclear safety and power plant operations are maintained. Responsibilities include solving complex cyber security problems, participating in projects impacting cyber security, performing cyber security assessments, and hardening of critical digital assets (CDA).</p><p>
This position also contributes to the ongoing development and revision of the Nuclear Cyber Security Program to maintain a strong security posture and improve operational efficiency. This includes revision of program policies and procedures, participation in industry working groups, and building positive relationships with internal and external organizations.</p><p>
This position requires a solid understanding of integrated generating plant systems and the processes used to secure plant cyber assets. The analyst must demonstrate an understanding of the impact of cyber security processes on generating systems and the overall electric grid.</p><p></p><p><b>
Basic/Required Qualifications</b></p><p>
Graduation from a four-year college or university with a Bachelor of Science in Engineering or Computer Science or Cybersecurity, and minimum of 5 years of experience or 10 years of relevant experience in lieu of degree.</p><p></p><p><b>
Preferred Qualifications</b></p><ul><li>Working knowledge of NERC CIP standards and NIST Cybersecurity Framework</li><li>Working knowledge of power generation Distributive Control Systems (DCS)</li><li>Working knowledge of protection and control equipment</li><li>Working knowledge of SCADA and communication systems</li><li>Working knowledge of network architecture and firewall security</li><li>Ability to troubleshoot network communication equipment and systems</li><li>Experience in cybersecurity risk identification, management, audit, and compliance</li><li>Strong understanding of IT and OT Cybersecurity policies, standards, processes, and controls</li><li>Excellent verbal and written communication skills</li><li>Skilled principles of project management</li><li>Experience in the utility industry</li><li>Professional certification in cybersecurity or engineering</li></ul><p></p><p><b>
Working Conditions</b></p><ul><li>Office Environment</li><li>Operation facilities (plants, switchyards, substations)</li></ul><p></p><p><b>
Specific Requirements</b></p><ul><li>Governance &amp; Oversight travel (5-10%)</li><li>Support &amp; Performance travel (30-50%)</li></ul><p></p><p><b>
Travel Requirements</b></p>
5-15%<p></p><h3 class="jobSectionHeader"><b>
Relocation Assistance Provided (as applicable)</b></h3>
No<p></p><h3 class="jobSectionHeader"><b>
Represented/Union Position</b></h3>
No<p></p><h3 class="jobSectionHeader"><b>
Visa Sponsored Position</b></h3>
No<h3 class="jobSectionHeader"><b>
Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.</b></h3><p>
Privacy</p><p>
Do Not Sell My Personal Information (CA)</p><p>
Terms of Use</p><p>
Accessibility</p></div>

Associate Operations Cybersecurity Analyst OR Operations Cybersecurity Analyst

Seminole Electric Cooperative, Inc.

<div>
 <p>
  <strong>
   Position Summary Description
  </strong>
 </p>
 <br/>
 <p>
  Under direct supervision, monitor Seminole&rsquo;s networks and cyber assets for potential security incidents and data breaches. This includes monitoring of&nbsp;the network infrastructure (firewall, switches, etc.), the SIEM systems for cybersecurity threats, and assisting with threat mitigation and incident response. Additional responsibilities include administrating the cybersecurity awareness program and participating in the security training.&nbsp;Lastly, support the NERC CIP regulatory standards on applicable systems and during audits.
 </p>
 <br/>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  <strong>
   Qualifications and Education Requirements
  </strong>
 </p>
 <br/>
 <p>
  A bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related field is required. A minimum of three (3) years of experience as a Cybersecurity Analyst or similar role, with at least two years as a Firewall Administrator, Network Security Analyst, or Security Engineer, is required. Three (3) years of relevant experience can substitute for each year of education. A master&rsquo;s degree can substitute for one year of experience. Candidates may be considered for the job level of Cyber Analyst III with additional years of experience.
 </p>
 <br/>
 <p>
  Core Competencies: Adaptable, Collaborative, Conscientious, Critical-Thinking, Outcome-Driven and Professional
 </p>
 <br/>
 <p>
  Technical Competencies/Skills:
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Basic cybersecurity knowledge
  </li>
  <br/>
  <li>
   General administration for MS Windows systems
  </li>
  <br/>
  <li>
   Understanding of network architecture
  </li>
  <br/>
  <li>
   Fundamental of firewalls, switches, and routers
  </li>
  <br/>
  <li>
   Knowledge of Security Information Event Management (SIEM) systems
  </li>
  <br/>
  <li>
   Proficiency with Microsoft Office Applications
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  Soft Competencies/Skills:
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Effective verbal/nonverbal, listening, and written communications
  </li>
  <br/>
  <li>
   Analytical
  </li>
  <br/>
  <li>
   Problem Solving
  </li>
  <br/>
  <li>
   Works Independently
  </li>
  <br/>
  <li>
   Organization
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  <strong>
   Essential Functions
  </strong>
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Monitors firewalls, SIEM systems, network security equipment, and similar devices.
  </li>
  <br/>
  <li>
   Supports the cybersecurity training/education programs encompassing the enterprise.
  </li>
  <br/>
  <li>
   Provides cyber security support for all Seminole departments and users, as necessary.
  </li>
  <br/>
  <li>
   Assists with security reviews, identify potential issues, and assist with mitigating identified problems.
  </li>
  <br/>
  <li>
   Supports Seminole&rsquo;s cybersecurity training/education programs administered corporate wide.
  </li>
  <br/>
  <li>
   Supports cyber security related projects, as necessary.
  </li>
  <br/>
  <li>
   Makes recommendations for changes to improve service and/or contain costs.
  </li>
  <br/>
  <li>
   Assists with incident response, recovery, and containment activities in support of the NERC Reliability Standards (CIP-003, 008 and 009).
  </li>
  <br/>
  <li>
   Remains current on cybersecurity threats, technological advancements and industry trends.
  </li>
  <br/>
  <li>
   Provides weekly progress reports on all assigned tasks and activities.
  </li>
  <br/>
  <li>
   Produces cybersecurity&nbsp;related data, alerts and reports as requested
   <strong>
    .
   </strong>
  </li>
  <br/>
  <li>
   Performs other duties as applicable to the position or as assigned.
  </li>
  <br/>
 </ul>
 <br/>
 <ul>
  <br/>
  <li>
   <strong>
    NERC Compliance:
   </strong>
   Performs NERC Compliance Program roles if/as designated in Seminole's Standard Ownership Matrix (SOM) including ongoing evidence retention in "audit-ready" form. You should also be familiar with Seminole's Enterprise Internal Compliance Program (ENT-GCD-RGC-EP-054) to further your understanding of Seminole's compliance program and your duties and responsibilities in the SOM.
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  <strong>
   Physical Requirements
  </strong>
 </p>
 <br/>
 <p>
  Must be able to follow established protective measures including wearing required personal protective equipment (PPE). Must possess a valid driver&rsquo;s license and acceptable Motor Vehicle Report.
 </p>
 <br/>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  <strong>
   Working Conditions
  </strong>
 </p>
 <br/>
 <p>
  Some travel and work outside of normal business hours. While working in certain areas of the plant or substation there is the potential for exposure to hazards typical of an industrial working environment.&nbsp;Maintains critical cyber equipment in a real-time environment that requires 24/7 on-call support and is subject to call out at any time which may include extended periods during inclement weather or other emergency conditions.
 </p>
 <br/>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  &ldquo;Disclaimer - Management may modify this job description at any time and may require the performance of additional duties,&nbsp;or modification of physical requirements, with or without advance notice.&rdquo;
 </p>
</div>


CYBER SECURITY ANALYST II/III

Kidde Global Solutions

The Next Level of Fire & Life Safety Leadership
<br>With more than two centuries of combined history, brands like Kidde, Kidde Commercial, Edwards, GST, Badger, Gloria and Aritech have been leading the way in protecting people and property around the world. Now, we’re taking that leadership to the next level. Kidde Global Solutions brings together the most trusted and iconic brands in safety, building upon our shared experience and expertise to address the needs and challenges of more customers in more places. With an unmatched portfolio of solutions and services, and a commitment to constant innovation we’re elevating the standards for an entire industry – and establishing the next level of fire and life safety leadership.
<br>At Kidde Global Solutions, you’re joining a global technology leader in fire and life safety solutions and our employees are the heart of it all. With industry-defining brands in life safety and security, you’ll be part of a legacy of leadership working with cutting-edge technologies that protect lives and property worldwide. As a leading fire safety brand, our mission is to provide solutions that protect people and property from the effects of fire and related hazards. We’re committed to expanding our impact and providing dynamic opportunities for growth within our team. You’ll be part of a company that prioritizes quality, integrity, collaboration, and customer care, with the resources, training, and incentives to ensure your success every step of the way.
<br>If you’re ready to take the next step in your career and be part of an innovative, mission-driven team, apply now!
<br><br>
Senior Cyber Risk & Compliance Analyst
<br><b>Location:</b> Onsite in Mebane, NC, Bradenton, FL, or Palm Beach Gardens, FL
<br><b>Base Salary Rate:</b> $117,887 – 138,690 per year
<br><b>Job type:</b> Full-time position
<br><br>
About This Role
<br>The Senior Cyber Risk & Compliance Analyst is a hands on execution leader responsible for driving cyber risk, compliance, and audit activities to completion across the enterprise. This role requires a self directed, highly accountable professional who can independently own workstreams, engage confidently with auditors and senior leaders, and translate requirements into completed, defensible outcomes.
<br>This role is ideal for a senior analyst who operates as a trusted problem solver, not just a coordinator. It is someone who closes gaps, chases evidence, and ensures commitments are delivered without constant direction.
<br><br>
Key Responsibilities
<br>Audit & Assurance Execution (Primary Focus)
<br><ul>
<li>Serve as a day to day execution lead for external and internal audits (SOX equivalent, operational audits, cybersecurity reviews).</li>
<li>Own audit evidence collection, validation, and submission, ensuring materials are complete, accurate, and audit defensible.</li>
<li>Proactively track open audit items, drive follow ups, and escalate risks early when timelines or control performance is at risk.</li>
<li>Communicate directly with external auditors and internal stakeholders, providing clear, structured updates and resolving questions efficiently.</li>
</ul>
Cyber Risk Management & Issue Resolution
<br><ul>
<li>Manage assigned cybersecurity risks end to end, including:</li>
<li>Risk documentation and tracking</li>
<li>Control gaps and remediation activities</li>
<li>Owner follow ups and closure verification</li>
<li>Actively challenge incomplete or weak responses and push issues to resolution, rather than passively tracking them.</li>
<li>Contribute to risk reviews related to external exposure, penetration testing results, and security control effectiveness.</li>
</ul>
Operational Governance & Deliverables
<br><ul>
<li>Independently own governance deliverables such as:</li>
<li>Control evidence packages</li>
<li>Risk summaries and issue trackers</li>
<li>Status updates for leadership and auditors</li>
<li>Maintain clear documentation and evidence trails suitable for repeatable audits and regulatory scrutiny.</li>
<li>Support enterprise initiatives tied to SOX-level controls, audit remediation, and cyber risk transparency.</li>
</ul>
Cross Functional Leadership (Without Direct Reports)
<br><ul>
<li>Operate as a lead individual contributor, coordinating across IT, Infrastructure, Security, Finance, and third party vendors.</li>
<li>Build credibility with technical and non technical stakeholders through clarity, follow through, and consistent delivery.</li>
<li>Model strong accountability and raise issues early when dependencies or ownership gaps emerge.</li>
</ul>
Basic Qualifications
<br><ul>
<li>Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Accounting, Business, or related discipline (Relevant professional experience may be considered in lieu of a degree)</li>
<li>7+ years of experience in cybersecurity risk, IT risk, internal controls, compliance, or audit adjacent roles.</li>
</ul>
Preferred Qualifications
<br><ul>
<li>Demonstrated experience directly supporting or leading portions of external audits (not just preparing background materials).</li>
<li>Proven track record of independently owning workstreams and driving them to completion.</li>
<li>Proven experience leading organizations through certification across multiple cybersecurity frameworks, including ISO/IEC 27001, CMMC and comparable regulatory or industry standards.</li>
<li>Experience with GRC tools (Drata)</li>
<li>Strong understanding of:</li>
<li>Cybersecurity risk management concepts</li>
<li>IT controls and control evidence expectations</li>
<li>Audit workflows and external auditor interaction</li>
<li>High personal accountability with the ability to manage multiple concurrent deliverables.</li>
<li>Clear, concise written and verbal communication, especially in audit and leadership contexts.</li>
<li>Comfortable pushing back, probing gaps, and escalating when needed.</li>
<li>Self starter who requires minimal hand holding.</li>
<li>Execution focused: prioritizes closure over coordination.</li>
<li>Detail oriented without losing sight of deadlines and outcomes.</li>
<li>Exposure to SOX level environments.</li>
<li>Prior experience working in fast paced, global organizations with distributed stakeholders.</li>
<li>Holder of certifications (e.g., CISA, CRISC, CISM, CISSP, CIA, Security+, etc.)</li>
</ul>
Compensation and Benefits
<br>Individuals may be eligible for an annual performance bonus based on both individual and company’s performance. The final compensation for this position will be set based on the individual’s knowledge, skills, and experience as it relates to the job requirements. Kidde Global Solutions is committed to providing a competitive benefits package to our employees including medical, dental, and vision coverage, life and disability insurance, retirement plan, paid time off (vacation, sick, company holidays), 401(k) with employer match, EAP assistance, and more.
<br>World Leaders in Fire and Life Safety
<br>Kidde Global Solutions is a world leader in fire & life safety solutions tailored for complex commercial facilities to homes. Through iconic, industry-defining brands including Kidde, Kidde Commercial, Edwards, GST, Badger, Gloria and Aritech, we provide residential and commercial customers with advanced solutions and services to protect people and property in a wide range of applications, all around the globe.
<br>Kidde Global Solutions is an Equal Opportunity Employer and prohibits discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other status protected by federal, state, or local laws.

Senior Cyber Risk & Compliance Analyst

Capgemini

<p></p><div><div><div><div><div>Wilmington, DE, United States (On-site)</div></div><div></div><div><div>
Contract (5 months 21 days)</div></div><div></div><div><div>
Published 4 days ago</div></div></div><div><div><div>
stakeholder management</div></div><div><div>
Security Operations</div></div><div><div>
cyber security</div></div><div><div>
Security Monitoring Tools</div></div><div><div>
risk management</div></div><div><div>
gap analysis</div></div><div><div>
problem - solving analytical skills</div></div><div><div>
Secure Development Lifecycle (SDLC)</div></div></div><div><div><ul><li><p>
This is a contract position for a Cyber Security Analyst that will be part of the CISO function and will support Clients US Consumer Banking Business with the acquisition of Best Egg.
</p></li><li><p>The role will support Best Egg Integration and will be responsible to work on the legal day 1 and beyond Cyber deliverables for the Project that includes, completion of the gap analysis against Clients standards, alignment with Clients tech and cyber policies and standards and determine and co-ordinate post legal day 1 integration and control enhancements/deliverables.
</p></li><li><p>This will include requirements related to penetration testing, third party security, data security, vulnerability management, secure configuration, and other cyber domains.
</p></li><li><p>Additionally, the role will support the Business Information Security Office with governance activities for Best Egg Cyber function in the first year.</p></li></ul><p><b><br>
Key Accountabilities:</b></p><ul><li><p>
Support gap assessment against Clients Cyber policies and standards and help define remediation plans to address the gaps</p></li><li><p>
Ensure gaps and risks are recorded as per Clients governance framework and are tracked to closure.</p></li><li><p>
Co-ordination of penetration testing of Best Egg networks and applications, and security reviews related to third party security, data security, vulnerability management, secure configuration, and other cyber domains.</p></li><li><p>
Support Cyber Security activities and other related activities to ensure the organization's assets and IT systems are appropriately protected against unauthorized activities including deliberate or accidental loss.</p></li><li><p>
Execution of security risk assessments during the change &amp; development lifecycle to identify vulnerabilities within Best Egg systems, applications and infrastructure, ensuring compensating security controls and countermeasures are embedded to enhance security posture and resilience against cyber threats.</p></li><li><p>
Support and provide guidance to Chief Information Security Office (CISO), Business information Security Office (BISO), Chief Information Office (CIO) and Product Team functions providing security reviews and recommendations for risk mitigation.</p></li><li><p>
Contribute to the design of security solutions</p></li><li><p>
Work with the business and project team(s) to ensure residual risks are adequately mitigated to the degree that meets the risk appetite of the business.</p></li><li><p>
Handling complex information. 'Complex' information could include sensitive information.</p></li><li><p>
Influence or convince stakeholders to achieve outcomes.</p></li></ul><p><b><br>
Person/Skillset Specification:</b></p><ul><li><p>
Has 5 to 7 years of experience in cyber and information security domain preferably in CISO or Security consultancy roles</p></li><li><p>
Broad domain expertise across network security, cloud, IAM, data protection, application security, third-party security and artificial intelligence.</p></li><li><p>
Understanding of security strategies and technologies including secure network design, e-Channels, remote computing, desktop and server hardening, secure web services, Compliance Auditing, Penetration Testing, Security Monitoring, Access Controls (identification, authentication and authorization) and Encryption.</p></li><li><p>
Expertise in Technology and cyber standards and control framework and experience performing gap assessments against these framework as well as recommending risk mitigation measures.</p></li><li><p>
Working knowledge of NIST CSF, ISO/IEC 27001/27002, PCI DSS/PED and CIS Controls, and their application into diverse environments.</p></li><li><p>
Understanding of the security mechanisms associated with Windows or Unix operating systems, switched networks, web based applications and databases.</p></li><li><p>
Competent to discuss the underlying technology with product developers.</p></li><li><p>
Contribute to formulation of controls and best practices for security management.</p></li><li><p>
Can describe all key Cyber Security functions, major roles, responsibilities and their inter-dependencies.</p></li><li><p>
Has contributed to the creation of technology-related security best practices and processes.</p></li><li><p>
Understands security operations from a people, process and technology perspective.</p></li><li><p>
Understands routine Cyber Security monitoring and administration tools.</p></li></ul><p><b><br>
Risk and Control Objective:</b></p><ul><li><p>
Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Clients Policies and Policy Standards</p></li></ul><p></p><p><br>
The pay range that the employer in good faith reasonably expects to pay for this position is $36.98/hour - $57.79/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.
</p><p></p><p>Tundra Technical Solutions is among North America&rsquo;s leading providers of Staffing and Consulting Services. Our success and our clients&rsquo; success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.</p></div></div></div></div><p></p>

Cyber Security Analyst

Search 10000+ Senior cyber security analyst jobs near you this May. New roles added regularly across leading industries. Apply today.