Job Title: Information Security Analyst

Job Type: Full-Time/Contract - 2 years (renewable)

Location: Jamaica (Remote)

RoleSummary:

Working collaboratively with the Information Security team and third-party service providers, the Information Security Analyst will contribute to the protection of the Banks information assets. The incumbent will assist in identifying and analysing security anomalies and applying mitigating actions as instructed by management. The Analyst will also assist in the management of information security risks related to the use, processing, storage, and transmission of information and the systems and processes used for those purposes.

The incumbent will assist with the embedding of policies, standards and procedures related to the effective management of the Banks security posture and will assist in the execution of security tests, risk assessments, exercises, simulations, initial investigation of security breaches, user training and other security activities as deemed necessary. The Analyst will be part of a team of information security professionals working closely with server and network operations to ensure stability of the Banks information security posture and may also be required to liaise with internal and external auditors and assist in audit reviews throughout the year.

KeyResponsibilities:

Governance and risk management:

• Supports the manager with the completion of IT risk assessments, including information security assessments (ISAs), threat risk assessments (TRAs), vulnerability scans, penetration testing, etc., follows up on open issues, validates completion of agreed mitigating tasks and other related tasks as requested by the manager

• Assists with the validation of identified vulnerabilities as directed by manager

• Monitors compliance of information security policies and standards as requested by the manager. Raises incidents of non-compliance / adherence with the manager and / or relevant parties to ensure resolution and learning

Incident and problem management:

• Assists with the collection and evaluation of information required to investigate and remediate, as necessary, alerts received from the onsite security tools and third party providers of information security services, e.g. IBM ISS.