Job Description

Position Summary:

The ideal candidate for this job will have courses and/or relevant work experience in some or all of the following skills
 

• Intrusion Prevention System support, McAfee NSP and Checkpoint IPS ideal
• Firewall support, Checkpoint ideal.
• Network troubleshooting, basic routing and switching
• Information security principles/domains such as application security, data loss prevention, penetration testing, perimeter security, network security, endpoint security, identity and access management and web security.
• Customer facing support in form of basic up to advanced troubleshooting, root cause analysis, and associated documentation of common issues in the form of Job Aid or SOPs.
• Experience or certification in technology endpoint, perimeter, or network security technologies.

This specific role will also include various elements of Governance, Risk and Compliance (GRC) for the MEISA region.
The analyst will have an active role in executing the following processes for the region. These processes execute faster with local support, this so we have local status tracking, escalation support and reduce our mean time to complete:
Governance
 

• Collaborate with the Enterprise Compliance Team, Risk Management Internal Controls (RMIC), IT business partners, Internal Audit, Legal, Information Security, External Auditors and other stakeholders in developing and maintaining policies and standards.
• Perform IS Control, Compliance and Risk Assessment activities as required by management.

 
Internal Controls
 

• Work with Control Owners and Compliance Champions to facilitate and support testing of Sarbanes Oxley (404) and PCI controls, ensure accuracy of control description and remediate any issues related to control deficiencies.
• Work with internal and third-party teams, Internal and External Auditors on IS control descriptions and changes.
• Communicate identified control deficiencies to management effectively, both verbally and in writing.
• Support and, where needed, perform IT Risk Assessments to ensure compliance with corporate security policies, regulatory requirements, and adherence to best practice