Information Security Analyst
Leal & Co ltd
The Information Security Analyst will support the Group Information Security function across governance, project management, security operations and audits. The role will take ownership of assigned policy deployment tracking, documentation and exception management, vendor assessments, VAPT coordination, remediation tracking, access management compliance, security monitoring follow-up, KPI compilation and audit evidence handling.
Closing date:
8/31/2026 12:00:00 AM
Main Duties
• Maintains governance records, including policy versions, evidence files, exception lists, and tracking documents.
• Supports policy implementation with IT teams and business units, including procedures and exception handling.
• Reviews vendor security documents, tracks renewals, reassessments, assurance status, and breach follow-ups.
• Coordinates VAPT activities, remediation tracking, project security reviews, and security tool implementation.
• Maintains access management records, identifies exceptions, and reports non-compliance.
• Monitors security platforms and alerts, compiles KPI, and tracks audit findings.
• Maintain confidentiality and proper handling of information.
• Prepare concise updates, tracking reports, evidence packs, remediation status summaries and KPI inputs for review by the Information Security Officer.
• Attend relevant meetings and coordinate actions with multiple teams.
• Escalate any major issues identified.
Qualifications
• Degree in Information Security, Computer Science or equivalent.
• CISA, CISSP or Microsoft Security Certifications, or pursuit of these certifications.
• 5 years’ relevant security, audit, governance, compliance, or IT experience.
• Experience with Microsoft Security Centre, CrowdStrike, vulnerability management platforms, VAPT coordination, security monitoring or alert follow-up.
• Experience supporting internal/external audits, auditor clarifications, evidence sorting and remediation follow-up.
• Experience in security-by-design activities for cloud, application integration, network architecture, access management or security tool implementation project
Other Requisites
- Supports governance, audits, vendor assessments, VAPT and compliance
tracking. - Organized, proactive, communicative, demonstrate high integrity, maintain strict
confidentiality, and understand basic AI security risks. - Able to maintain document versions, exception lists, evidence records, tracking
sheets and KPI reports accurately. - Proactive owner of assigned compliance, monitoring, vendor assessment, audit
support and remediation tracking activities. - Able to coordinate with IT teams, business units, vendors, auditors and project
stakeholders while escalating issues requiring management or technical
intervention. - Able to understand security implications of applications, infrastructure changes,
cloud services and access management processes. - Beginner-level AI security knowledge, including basic awareness of AI-related
risks.