Information Security Analyst ( ISO 27001 and ISO 27018 )
Core
Maintain and continuously improve the Information Security Management System (ISMS) and support audit/compliance functions for ISO 27001 and ISO 27018.
Role type
Information Security Analyst (Compliance & Audit)
Builds
ISMS policies, procedures, and audit evidence for regulatory compliance
Domain
Information Security / Compliance / Asset Finance
Deliverable
dashboards & analysis
Required skills
ISO 27001 compliance methodologies, ISO 27018 standards, SSAE 18 / ISAE 3402 SOC 1 Type 2 audits, SSAE 18 SOC 2 Type 2 audits, risk analysis, documentation writing, regulatory inspection support
Preferred skills
Regulated industry experience, other security frameworks (NIST, CSA STAR), Jira, Confluence
Technologies
Jira, Confluence, ISO 27001, ISO 27018, NIST, CSA STAR
Responsibilities
Maintain ISMS policies and procedures, participate in ISO 27001 and ISO 27018 audits, build documentation for regulatory requirements, support internal and external audits, compile evidence for scrutiny, analyze and mitigate security risks
Seniority
Mid-level, hands-on IC