Information Security Associate / Senior Associate

Role Description

This role plays a critical role in protecting information assets, strengthening security governance, and supporting resilient business operations.

The Cybersecurity Specialist combines hands‑on security operations with policy development, risk‑based controls, and continuous monitoring.

Responsibilities

• Support cybersecurity operations by identifying, monitoring, and escalating cyber risks in line with organizational policies, regulatory requirements, and governance frameworks.
• Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures covering people, process, and technology.
• Monitor cybersecurity activities, including Security Operations Center (SOC) alerts, threat intelligence feeds, and system logs, ensuring timely identification and response to security events.
• Support the investigation, analysis, and resolution of cybersecurity incidents, including documentation, root cause analysis, and post‑incident reviews.
• Conduct regular security assessments, compliance reviews, and control testing to ensure adherence to internal policies and external regulations.
• Monitor and report on compliance with applicable cybersecurity frameworks and standards.
• Contribute to the delivery of risk‑based cybersecurity solutions that balance security, usability, and operational efficiency.
• Develop clear security risk reporting and dashboards.
• Support process improvement, documentation, and automation initiatives.
• Build strong working relationships with business stakeholders, providing cybersecurity guidance that supports governance.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• More than 7 years of full-time experience in cybersecurity operations, information security, or a closely related technology risk role.
• Hands‑on experience with cybersecurity monitoring, incident response, vulnerability management, and security controls.
• Strong working knowledge of cybersecurity frameworks, regulations, and industry standards.
• Ability to analyze security data, document findings clearly, and communicate cyber risks to both technical and non‑technical stakeholders.
• Demonstrated experience supporting audits, regulatory compliance activities, and security reviews.
• Professional certifications such as:
• CISM – Certified Information Security Manager
• CISSP – Certified Information Systems Security Professional
• Strong organizational skills, attention to detail, and the ability to work effectively in a collaborative, fast‑paced environment.