Information Security Analyst – Governance, Risk & Compliance

About the role

The Information Security Analyst will lead governance, risk and compliance activities across the bank’s IT environment. You will assess cyber‑security risks, maintain the risk register and ensure that security controls align with the bank’s operational and regulatory requirements.

Key responsibilities

• Perform information and cyber‑security risk assessments of IT infrastructure and operations.
• Conduct ad‑hoc security reviews of systems and products based on management requests.
• Identify internal control issues and define remediation actions.
• Maintain the risk register, incorporating all audit findings.
• Coordinate with internal stakeholders to track remediation progress and meet timelines.
• Report and escalate risk findings to Group and country teams.
• Evaluate mitigation measures from a risk perspective.
• Execute ad‑hoc projects assigned by the line manager.

Required profile

• 2‑3 years of information security or technology risk experience, preferably in a Big 4 audit firm or financial institution.
• Bachelor’s or Master’s degree in Computer Science, IT, or related field.
• One of the following certifications is preferred: CompTIA Security+, MTA Security Fundamentals, ISACA CSX, GIAC GISF, or (ISC)² SSCP.
• Strong understanding of banking technical and business environments.
• Ability to work under pressure, be result‑oriented and collaborate effectively with global security teams.

Required skills

• Risk assessment and risk register management.
• Knowledge of databases, operating systems, networking, user management, encryption & cryptography.
• Experience with change management, backup management and security technologies.
• Familiarity with industry frameworks and standards such as NIST, ISO 27000 series, SANS, COBIT, OWASP and PCI DSS.
• Application and source‑code analysis.