Information Security Analyst

Role overview

Responsibilities

• Monitor alerts, system logs, and security events to identify suspicious activity; investigate incidents, assess impacts, and coordinate responses.
• Conduct vulnerability assessments and support remediation across systems, applications, and networks.
• Review security configurations, access permissions, and authentication controls; help maintain policies, procedures, and safeguards.
• Support risk assessments, security reviews, and compliance activities; analyze threat intelligence and emerging vulnerabilities.
• Maintain incident, investigation, risk, and remediation records; collaborate with IT, engineering, and business teams.
• Assist with security awareness, access management, data protection, endpoint security, and control testing.
• Recommend improvements to monitoring processes, incident response, and security operations.

Requirements

• At least 3 years of relevant information security, cybersecurity, IT security, or related experience is preferred.
• A bachelor's degree or equivalent in Cybersecurity, Information Technology, Computer Science, or a related discipline is preferred.
• Understanding of security principles, threat detection, vulnerability management, and incident response.
• Familiarity with SIEM tools, endpoint protection, and vulnerability scanning solutions.
• Knowledge of networking, operating systems, identity and access management, and common security threats.
• ISO 27001 or NIST awareness is an advantage; professional certifications are not required.
• Strong analytical, investigative, problem-solving, documentation, and communication skills; ability to work independently and collaborate remotely.
• High standards of confidentiality, integrity, and responsible handling of sensitive information.

Work arrangement

• The role is fully remote and part-time.

What the employer offers

• Flexible part-time work with a fully remote arrangement.
• Opportunities to contribute to cybersecurity and risk reduction initiatives and gain exposure to monitoring, vulnerability management, and incident response.
• A collaborative environment focused on technical development, accountability, and continuous learning.