Information Security Analyst ( ISO 27001 and ISO 27018 )
Core
Maintain and continuously improve the Information Security Management System (ISMS) and support internal/external audits for ISO 27001 and ISO 27018 compliance.
Role type
Information Security Analyst (Audit & Compliance)
Builds
ISMS documentation, audit evidence, and compliance reports for asset finance clients
Domain
Asset finance / Information Security / Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
ISO 27001 compliance methodologies, ISO 27018 standards, SSAE 18 / ISAE 3402 SOC 1 Type 2 audit procedures, SSAE 18 SOC 2 Type 2 audit procedures, risk analysis and mitigation, regulatory inspection support, documentation and reporting
Preferred skills
Experience in regulated industries, familiarity with NIST and CSA STAR frameworks, Jira, Confluence
Technologies
Jira, Confluence
Responsibilities
Maintain and improve the ISMS, participate in ISO 27001 and ISO 27018 audits, build documentation for regulatory requirements, support internal and external audits, compile evidence for regulatory inspections, analyze and mitigate security risks
Seniority
Mid-level, hands-on IC