Associate Information Security Analyst

Work With The Best

At Merchants our vision is to create meaningful and sustainable futures for our people, by driving a culture of continuous learning through the many skills and development programmes we offer, which are designed to develop talent and fulfil potential.

If you were born to deliver exceptional service, apply to join our professional team and be ready to kick start your career. We’re always looking for expectational talent and are known around the world for our outstanding customer experience using the latest technology, best practice models and processes, and innovative ground-breaking training techniques.

We place our people at the centre of everything we do and believe that the way you treat your customers and people differentiates us.

Are you ready to take the next step in your career?

What you will be doing;

The purpose of the role is the auditing and remediation of security governance which includes cybersecurity analysis, incident detection/response, and the implementation of best-practice IT Security processes, threat assessment, cyber intelligence, secure software configurations, and vulnerability assessments/mitigations.

1. 1. Vulnerability Management

• Analyses and validates vulnerabilities then plan remediation activities

• Schedules and performs regular vulnerability scanning activities in the corporate network

• Reviews security vulnerabilities to identify risks to computing assets

• Provides technical vulnerability analysis and remediation options

• Reduces vulnerability by improving remediation and patch management process

• Ensures familiarity with Qualys and Nessus vulnerability scanner

• Reports and presents findings to a non-technical audience

• Assisting with the development and updating of cybersecurity-centric policies and procedures

• Assists with establishing network device implementation best practices, while providing guidance to others

1. 2. Risk Management

• Information Security and related risk assessments, as well as remediation plan development

• Identifying, raising and managing security risks through the appropriate risk life cycle

• Proactive risk management and engagement with business partners

1. 3. Information Security Governance, Compliance and Audits

• Lead discussions with internal stakeholders to ensure remediation efforts adhere to Company standards

• Assists with PCI and ISO compliance reviews, as needed

• Conducts periodic user access reviews in conjunction with department heads

• Assist in updating existing Information Security Policies and Procedures

• Reviews network security audit logs (e.g., firewall, IDS, etc.) periodically. Evaluate compliance with established security controls

• Supports information security projects and initiatives

• Assists with the investigation of security incidents, recommend and implement solutions to remediate or mitigate

• Assists with the development of company-wide best practices for IT security

• Actively involved with information security education where required

• Conduct regular policy and plan reviews, report on findings, recommend policy and plan updates

• Review and provide feedback on common controls, the security categorization of information systems, and an applicable security control baseline based on system categorization

• Ability to evaluate, assess, and implement IT risk mitigation processes and procedures
• Knowledge of network security controls and vulnerability management
• Proven knowledge of information security standards, rules, and regulations including International Organization for Standards (ISO) 27001, 27002, National Institute of Standards and Technology (NIST) and others

• 2 -3 years’ experience of network, server, mobile devices, application, Proven knowledge of information security standards, rules, and regulations including International Organization for Standards (ISO) 27001, 27002, National Institute of Standards and Technology (NIST) and others

• 2 -3 years’ experience of network, server, mobile devices, application, and database security principles for risk identification and analysis
• Ability to work effectively with auditors, customers, consultants, employees, and vendors 

Additional Requirements

• Knowledge/exposure to PCI-DSS an advantage