Location: Lahore

Job Summary

The Information Security Analyst will be responsible for providing key development, design, integration, and enhancement of information security governance and frameworks necessary to manage the risks and cyber security for the company. This position will ensure security controls are defined, optimized, and remain consistent throughout the organization and meet regulatory requirements and industry best practices such as PCI and IT SOX.

Responsibilities

• Develop and implement information security frameworks and controls such as ISO27001:2013, SAN Top 20, and OWASP Top 10.
• Manage a risk-based process for vendor risk management, including the assessment and treatment for risks that may result from internal customers, consultants, and service providers.
• Heavy responsibility on PCI and IT SOX compliance efforts.
• Establish baseline hardening standards for IT systems across the organization.