UST is looking for Information Security Analyst with below requirements,
Operational Support:
o Coordinate with technology factory teams for assessment as per BAU process
o Work with Technology Asset Owners (TAOs) to assess and implement relevant BAU process for Control Factory Candidates
o Perform Assessments to determine security risks/ non-compliance as per the SOP manuals
o Work with the team concerned and follow through remediation
o Tracking and progress reporting
o Perform periodic assessments to ensure compliance proactively
Skill Set Requirements:
Role: Control Factory - Information Security Analyst
Skills & Background:
o Minimum 5-10 years of relevant industry experience in any technology risk management (TRM), IT audit and/or cyber/information security functions
o Ability to understand and operate documented process for IT compliance, audit and regulatory requests
o Knowhow and understanding in one or more areas of technology risk management principles, internal control concepts, cyber/information security controls, and industry frameworks
o Follow documented process to maintain BAU operations
o Communication Results to stakeholders
o Analyze Deviations and prepare remediation plan along the documented procedures
o Be able to understand controls, develop inventory, assess applications against controls
o Be able to work with stakeholders in remediation activities
o Ability to manage JIRA workflow tickets for BAU process
o Prepare & maintain knowledge base in Confluence/Collaborate
o Identify areas of automation/innovation and efficiencies to enhance the BAU operation and stakeholder experience
o Functional knowledge of operating systems (Windows/Unix), databases, networks and components like system IDs, system resources, firewalls, LDAP, AD, Cloud
o Functional knowledge of applications (authentication, authorization, interfaces, APIs), logging and monitoring
o Functional knowledge of application design and architecture
o Functional knowledge of application criticality, availability and data classification
o Able to learn new skills with training and self-study
o Any relevant experience in Project Management is desirable.
Tools
o JIRA, Confluence, ServiceNow and/ or Archer.
o MS Office (Word/Excel/Visio), PDF and PowerPoint.
Education and Certifications
o Degree or diploma in IT or technology stream
o Any industry recognized IT certifications (Microsoft, Cloud, IT Security etc)