Business Analyst (Information Security)

Pearson Lanka (Pvt) Ltd

https://www.dreamjobs.lk/jobs/business-analyst-information-security

Business Analyst - Information Security (CISO function) <div dir="ltr"> <table> <tbody> <tr> <td> ESSENTIAL DUTIES AND RESPONSIBILITIES <ul> <li dir="ltr"> Responsible for all Information Security activities within an assigned geography </li> <li dir="ltr"> Reporting <ul> <li dir="ltr"> Supports the RISO in preparing monthly CISO and RISO reports including KPIs and drive continuous improvement </li> <li dir="ltr"> Metrics collection, analysis, trending and publishing. Follow through all remediation activities </li> </ul> </li> <li dir="ltr"> Security Forums <ul> <li dir="ltr"> Support all Geo Security forums by actively engaging with dispersed stakeholders, track actions and drive to closure </li> </ul> </li> <li dir="ltr"> Risk Exception Management <ul> <li dir="ltr"> Support creation of all new risk exception </li> <li dir="ltr"> Follow through on all exception closures and support risk analysis work </li> </ul> </li> <li dir="ltr"> Security Policy Compliance <ul> <li dir="ltr"> Work with local markets to drive the adoption of Pearson Information Security policies through interaction with local business, technology and shared functions. </li> </ul> </li> <li dir="ltr"> Vulnerability Tracking <ul> <li dir="ltr"> Assist RISO in tracking and reporting on Vulnerabilities across regions </li> <li dir="ltr"> Follow/up with application / server owners where vulnerabilities are identified and coordinate on creating remediation plans, drive to closure etc </li> </ul> </li> <li dir="ltr"> Risk Assessments <ul> <li dir="ltr"> Support RISO in Risk Assessment planning and scheduling </li> <li dir="ltr"> Participate in Risk assessment meetings, capture notes to help document the interview results and formulating risk maps </li> <li dir="ltr"> Support in creating risk remediation plans </li> </ul> </li> <li dir="ltr"> Ad-hoc reports <ul> <li dir="ltr"> In addition to the above support activities, the analyst should be able to support any ad-hoc reporting and analysis requirements from RISO. </li> </ul> </li> <li dir="ltr"> Ad-hoc projects <ul> <li dir="ltr"> Take on small/low complexity projects and tasks </li> </ul> </li> </ul> </td> </tr> </tbody> </table> </div> EDUCATION and/or EXPERIENCE <ul> <li dir="ltr"> Possession of Bachelor’s Degree in an IT-related discipline is required. </li> <li dir="ltr"> At least 3+ years of Information Security experience with a focus on business analysis </li> <li dir="ltr"> Strong communication and presentation skills </li> <li dir="ltr"> Expert level Analytical and reporting skills </li> <li dir="ltr"> Familiarity with common security tools, including vulnerability scanners, Security Incident and Event Management, Intrusion Detection/Prevention Systems, Web Application Firewall, and web application assessment enabling tools. </li> <li dir="ltr"> Ability to understand and communicate business impact of information security risks. </li> <li dir="ltr">Flexible to work across various timezones </li> </ul> Please click the link to apply - http://pearsonlankavacancies.peopleshr.com/