Information Security Associate

We are seeking an Information Security Associate to support the implementation, monitoring, and enhancement of information security practices across the organization. The successful candidate will assist in maintaining security standards, managing security operations, conducting risk assessments, supporting incident response activities, and promoting information security awareness.

Key Responsibilities:

Information Security & Compliance

Support the implementation and maintenance of information security frameworks and controls.
Assist in ensuring compliance with industry standards such as ISO 27001, NIST, and PCI-DSS.
Participate in security assessments and audits of systems, applications, and infrastructure.
Review security requirements for new technologies, applications, and projects.

Security Operations

Assist in monitoring security events and incidents.
Support Security Operations Center (SOC) activities and reporting.
Contribute to vulnerability assessments and remediation activities.
Help implement security controls to protect sensitive information.

Risk Management

Conduct information security risk assessments.
Assist in identifying security vulnerabilities and recommending mitigation measures.
Support third-party security assessments and vendor reviews.

Incident Response & Forensics

Participate in incident response investigations and reporting.
Assist with root cause analysis and corrective action plans.
Support digital forensics activities and evidence preservation when required.

Security Awareness

Support the development and delivery of security awareness initiatives and training programs.
Promote security best practices across the organization.

Qualifications:

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related field.
0–3 years of experience in Information Security or Cybersecurity.
Knowledge of information security frameworks such as ISO 27001, NIST, or PCI-DSS.
Understanding of network security, risk assessment, vulnerability management, and incident response.

Preferred Certifications

CISSP
CRISC
SANS Certifications
ISO 27001-related certifications

Technical Skills

Security Operations (SOC)
Risk Assessment
Ethical Hacking
Digital Forensics
Security Monitoring & Incident Response
Network Security
Data Analytics & Reporting

Competencies

Initiative
Innovation
Teamwork
Accountability
Quality Focus
Customer Service Orientation