Information Security Assurance Analyst

In this role, I will need you to maintain and improve our Information Security Management System (ISMS) by updating policies, procedures, standards, and guidance. You will coordinate and provide necessary support in planning and completing internal ISMS reviews. Additionally, you will be responsible for supplier onboarding and conducting annual supplier security assessments, as well as maintaining and developing security awareness and education programs. Your role will involve analyzing security alerts and incidents, reporting on incidents, risks, threats, and vulnerabilities, and scheduling internal and external penetration tests. You will assist in evaluating cyber security tools and managing our online ISMS system. Furthermore, I expect you to support the Information Security Manager in delivering security projects and participate in technology-related audits by providing evidence as required. You'll need to ensure that information security controls are evaluated and effective, respond to audit recommendations, and establish good relationships with internal stakeholders and third-party vendors. Reporting on information security projects and activities will also be essential, as will supporting ongoing reviews to improve the ISMS and performing targeted risk assessments.