Information Security Analyst

The Information Security Analyst is responsible for supporting information security governance, risk management, and compliance initiatives. The role focuses on ISMS and ISO 27001 operations, security risk and gap assessments, incident response support, regulatory compliance (e.G. PDPA, GDPR), and working with cross-functional teams to strengthen the organisation’s security posture.

Key Responsibilities

• Support and contribute to the organisation’s information security planning, strategy, and governance initiatives.
• Implement, operate, and continuously improve the Information Security Management System (ISMS), including support for ISO/IEC 27001 certification and audit activities.
• Perform security gap assessments using recognised frameworks such as NIST Cybersecurity Framework (CSF) and/or CIS Controls, and assist in tracking remediation actions.
• Conduct security risk assessments, maintain risk registers, and support ri...