IT Security Analyst at Electrum

The Role:

Electrum is looking for an experienced and technical IT Security Analyst to assist our Engineering team with all aspects of IT Security. This IT Security Analyst will ensure Electrum’s systems compliance with ISO 27001 Standard by managing controls and implementations

An IT Security Analyst is responsible for protecting an organisation's digital assets and networks against potential security breaches, cyber attacks, and other forms of unauthorised access. They monitor the organisation's systems and networks to detect and respond to security incidents, investigate security incidents to determine their cause and potential impact, and develop and implement security solutions to mitigate future risks

Responsibilities:

• Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities in the organisation's systems and networks.
• Monitoring and analysing security logs, alerts, and other data to detect and respond to security incidents in a timely manner.
• Evaluates, tests, monitors and maintains information systems (IS) and cyber security policies, procedures and systems.
• Creates, implements and oversees identity management systems to meet specific security needs and complex compliance standards.
• Investigating security incidents to determine their cause, scope, and potential impact on the organisation's systems and data.
• Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security.
• Developing and implementing security policies, procedures, and controls to mitigate security risks and ensure compliance with industry standards and regulations.
• Develops techniques and procedures for conducting IS, cyber security and access and identity risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks.
• Ensures that IS and cyber security plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS and cyber security
• Collaborating with other IT teams to identify and implement security best practices and solutions.
• Conducting regular security audits to ensure compliance with security policies and regulations.
• Participating in incident response and disaster recovery planning and testing

Requirements

• Bachelor's degree in Computer Science, Information Systems, Information Technology, or related field of study
• 3 years experience in IT Information Security or related fields
• Strong technical background in computer systems and network security.
• Experience in AWS is essential
• Industry certifications such as Certified Information Security Professional (CISP) or Certified Ethical Hacker (CEH)
• Knowledge of security technologies and tools such as firewalls, intrusion detection systems, and vulnerability scanners

Advantageous for the role:

• Certified Cloud Security Professional (CCSP) Certification
• Knowledge of ISO 27001 and PCI-DSS security standards
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Ability to work independently and as part of a team to implement effective security measures for the organisation