Information Security Analyst

About the role

This position reports to the Manager Cybersecurity and Innovation within the Information Technology Unit of the Currency and Corporate Services Group. The role is responsible for safeguarding the organisation’s cybersecurity posture through continuous monitoring, incident management and compliance with security policies.

Key responsibilities

• Monitor Security Operations Center (SOC) dashboards, investigate alerts and support incident resolution.
• Assist with vulnerability assessments, penetration testing and remediation planning.
• Manage identity and access controls, including account provisioning and regular audits.
• Deliver user security awareness training and promote a culture of security.
• Maintain data classification, cryptographic and AI security policies.
• Maintain risk registers and support change‑management and disaster‑recovery documentation.
• Plan and execute cyber drills, business continuity exercises and coordinate secure remote‑access with vendors.
• Support digital forensics, asset management and structured information governance.
• Contribute to audits, risk mitigation and ethical reviews of emerging technologies.

Required profile

• Bachelor’s degree in Computing Science or Information Systems.
• 4‑6 years of experience in network administration and information security.
• Strong networking knowledge (switches, routers, firewalls, DNS, zero‑trust, least‑privilege, 2FA, certificates, VPN, load balancers, cloud platforms).
• Ability to research new security tools, understand emerging trends and work independently while collaborating with teams.
• Strong analytical, problem‑solving, documentation and presentation skills.

Required skills

• Network administration
• Switches, routers, firewalls, DNS
• Zero‑trust architecture, least‑privilege access, two‑factor authentication, digital certificates, VPN, load balancers
• Cloud platforms
• Vulnerability assessment, penetration testing, remediation planning
• Identity and access management, account provisioning, audit processes
• Security awareness training
• Data classification, cryptographic policies, AI security policies
• Risk register maintenance, change management, disaster‑recovery documentation
• Cyber‑drill planning, business continuity exercises, vendor coordination
• Digital forensics, asset management, information governance
• SIEM tools, SOC dashboards, NOC, endpoint detection and response (EDR)
• Incident management, project management
• ITIL framework, ISO 27001 standard