Information Security Associate / Senior Associate

Role Description This role plays a critical role in protecting information assets, strengthening security governance, and supporting resilient business operations. The Cybersecurity Specialist combines hands‑on security operations with policy development, risk‑based controls, and continuous monitoring. Responsibilities Support cybersecurity operations by identifying, monitoring, and escalating cyber risks in line with organizational policies, regulatory requirements, and governance frameworks. Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures covering people, process, and technology. Monitor cybersecurity activities, including Security Operations Center (SOC) alerts, threat intelligence feeds, and system logs, ensuring timely identification and response to security events. Support the investigation, analysis, and resolution of cybersecurity incidents, including documentation, root cause analysis, and post‑incident reviews. Conduct regular security assessments, compliance reviews, and control testing to ensure adherence to internal policies and external regulations. Monitor and report on compliance with applicable cybersecurity frameworks and standards. Contribute to the delivery of risk‑based cybersecurity solutions that balance security, usability, and operational efficiency. Develop clear security risk reporting and dashboards. Support process improvement, documentation, and automation initiatives. Build strong working relationships with business stakeholders, providing cybersecurity guidance that supports governance. Requirements Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline. More than 7 years of full-time experience in cybersecurity operations, information security, or a closely related technology risk role. Hands‑on experience with cybersecurity monitoring, incident response, vulnerability management, and security controls. Strong working knowledge of cybersecurity frameworks, regulations, and industry standards. Ability to analyze security data, document findings clearly, and communicate cyber risks to both technical and non‑technical stakeholders. Demonstrated experience supporting audits, regulatory compliance activities, and security reviews. Professional certifications such as: CISM – Certified Information Security Manager CISSP – Certified Information Systems Security Professional Strong organizational skills, attention to detail, and the ability to work effectively in a collaborative, fast‑paced environment. Show more Show less