Description
The IT Security Analyst will be responsible for managing the definition and implementation of upgraded IT security processes as outlined below.
While working within the IT security function the analyst will be required to liaise with a range of areas to address the accountabilities outline below. These functions include IT security operations, company's risk function, external security service providers and other areas as appropriate.
Duties:
- Develop and obtain agreement regarding the policies to be applied to the management and review of regular vulnerability scans.
- Define and manage the implementation of procedures for the management and review of regular vulnerability scans, consistent with the policies defined above.
The procedures must address:
- Issue identification, plus any associated remediation plans, resulting from the vulnerability scans.
- Central tracking of issues identified and any associated remediation plans.
- Prioritisation and tracking of required remediation.
- Quality assurance of scan results to ensure consistency.
- Review and tracking of remedial actions and associated risk reduction.
- Define and obtain agreement regarding the risk acceptance procedures to be applied to vulnerability scanning. The procedures must address the:
- Define appropriate reporting of scan results and actions, including executive management updates.
Experience
Demonstrable IT security policies, processes and procedures generally.
Demonstrable expert knowledge of vulnerability scanning and management, include associated policies.
Relevant security qualification desirable but not essential.
Experience
- 5+ year's of IT security policy definition and process execution.
Contact Simone Oreilly at Cpl for further information