Information Security Associate

Information Security Associate

We are seeking an Information Security Associate to support the implementation, monitoring, and enhancement of information security practices across the organization. The successful candidate will assist in maintaining security standards, managing security operations, conducting risk assessments, supporting incident response activities, and promoting information security awareness.

Key Responsibilities:

Information Security & Compliance

• Support the implementation and maintenance of information security frameworks and controls.
• Assist in ensuring compliance with industry standards such as ISO 27001, NIST, and PCI-DSS.
• Participate in security assessments and audits of systems, applications, and infrastructure.
• Review security requirements for new technologies, applications, and projects.

Security Operations

• Assist in monitoring security events and incidents.
• Support Security Operations Center (SOC) activities and reporting.
• Contribute to vulnerability assessments and remediation activities.
• Help implement security controls to protect sensitive information.

Risk Management

• Conduct information security risk assessments.
• Assist in identifying security vulnerabilities and recommending mitigation measures.
• Support third-party security assessments and vendor reviews.

Incident Response & Forensics

• Participate in incident response investigations and reporting.
• Assist with root cause analysis and corrective action plans.
• Support digital forensics activities and evidence preservation when required.

Security Awareness

• Support the development and delivery of security awareness initiatives and training programs.
• Promote security best practices across the organization.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related field.
• 0–3 years of experience in Information Security or Cybersecurity.
• Knowledge of information security frameworks such as ISO 27001, NIST, or PCI-DSS.
• Understanding of network security, risk assessment, vulnerability management, and incident response.

Preferred Certifications

• CISSP
• CRISC
• SANS Certifications
• ISO 27001-related certifications

Technical Skills

• Security Operations (SOC)
• Risk Assessment
• Ethical Hacking
• Digital Forensics
• Security Monitoring & Incident Response
• Network Security
• Data Analytics & Reporting

Competencies

• Initiative
• Innovation
• Teamwork
• Accountability
• Quality Focus
• Customer Service Orientation