IT Security Analyst
@ Human Concern International

We are seeking a skilled IT Security Analyst to join our dynamic and growing IT team. The ideal candidate will be responsible for protecting our organization’s information systems, data and networks from various IT security and cyber threats. This role involves monitoring, analyzing, and responding to security incidents, as well as implementing and maintaining security measures to safeguard sensitive data and technology systems. The IT Security Analyst will work closely with other IT professionals and departments to ensure a robust security posture across the organization.

Key Duties and Responsibilities

● Implement and maintain security measures for hybrid IT infrastructure including Office 353, Google Workspace, remote computers users, applications and hybrid storage solutions (NAS, NZF, RAID).

● Conduct and document regular security assessments and audits of HCI’s tech stacks/ systems to identify vulnerabilities and perform risk analysis.

● Document, Implement and manage endpoint security solutions, including antivirus, endpoint detection and response (EDR), and mobile device management (MDM) systems, data backup.

● Configure and manage email security solutions, including anti-phishing, anti-spam, and email encryption technologies.

● Develop, document and enforce IT security policies and procedures to protect against advanced threats, malware, data loss etc.

● Analyze email security logs and investigate potential threats.

● Collaborate with IT teams to integrate security best practices into the development and deployment of cloud-based applications and services.

● Respond promptly to all security incidents and provide thorough post-event analysis.

● Based on the security assessment, continuously update and maintain the risk register.

● Collaborate with other departments to ensure implementation and monitoring of HCI security measures/practices.

● Develop and maintain documentation related to security configurations, processes, and procedures.

● Stay up-to-date with current technologies, threats, and industry best practices.

● Conduct security awareness training and education for staff members such as email security, social engineering and anti phishing.