Position: Security Analyst
Company: Intellectsoft
Experience required: 2y
English level: upper

Project description: The Region Security Analyst will be responsible for ensuring various sites within a geographic region comply with internal policies, various applicable industry standards, and international privacy laws. This role will assist in developing and improving the compliance program as whole to ensure the company security strategy is in line with the business and reducing security risks simultaneously. The Region Security Analyst will work with the US Information Security team in identifying risks related internal processes or technologies and suggesting control improvements, incident response, and security event monitoring.

**REQUIREMENTS**
– 3+ years of direct IT and/or information security experience.
– CISSP, CISA, CISM, or GIAC certification in good standing or equivalent work experience.
– Basic understanding of PCI DSS requirements.
– Basic understanding international privacy laws.
– Knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls.
– Ability to perform risk, business impact, control and vulnerability assessments.
– Basic, high-level understanding of network and server infrastructure and security technologies used in a large enterprise. This should include knowledge of best security practice for various technologies.
– Ability to identify and evaluate risk potential and define solutions that balance cost, impact, and company performance against that risk.
– Security-mindset with the ability to think about how weakness in a system or process could be exploited by a bad actor.
– Technical knowledge with respect to security of Microsoft Windows server/desktop and Linux operating systems.
– Understanding of security best practice relating to network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
– Excellent verbal and written English skills required.
– Technical networking or system administration experience is a big plus.

**RESPONSIBILITIES**
– Work with multiple departments inside IT and the business to select and implement controls to meet security requirements and reduce risk.
– Perform assessments, reviews, investigations, and other processes to assess compliance, ensure security best practice is followed and security controls are implemented effectively.
– Assist with the maintenance and improvement of the internal security framework per business requirements and risk tolerance.
– Perform risk assessments on internal processes and technology and maintain risk register.
– Ensure PCI DSS requirements are effectively implemented and helps gather documented evidence for annual third-party PCI assessments.
– Analyze, prioritize, and document security vulnerabilities as part of the risk assessment process.
– Assist with the analysis and response to security related requests and daily operation task related to content filtering, Spam filtering, malware protection, SIEM, and vulnerability scanning.
– Assist with the create of security reports for technical teams and management indicating security maturity, compliance & risk, and tactical & strategic mitigation plans.
– Participating in security-related projects with other members of security or IT teams.
– Assist with the analysis and prioritization of security vulnerability remediation.
– Promote security awareness and education.

**BENEFITS**
– Good opportunities to work with remarkable teams from all over the world;
– Lighthearted, inspiring and open company culture;
– Opportunities to travel;
– Health Insurance coverage;
– English language courses;
– Fresh fruit and other snacks onsite;
– Fun corporate events :)