Cybersecurity Analyst

Role purpose

Carry out monitoring, incident support and governance tasks assigned by the division lead. Document findings, evidence and follow-up actions to support risk, compliance and management reporting.

Assigned responsibilities

• Review assigned alerts and logs from networks, security platforms, servers and applications; triage, record and escalate under approved playbooks.

• Support assigned incident cases by preserving evidence, building timelines and tracking communication and follow-up actions.

• Update vulnerability and findings trackers for assigned assets, recording owners, priorities, due dates and remediation evidence.

• Update assigned risk, exception and control records; collect evidence and track treatment actions for the division lead's review.

• Support delegated access reviews with IT and business owners; flag unnecessary or unapproved privileges for follow-up.

• Prepare assigned security review records and checklists for projects, application changes, APIs and suppliers; escalate high-risk findings.

• Collect evidence against approved requirements and applicable NISSA controls; support audits and policy awareness tasks.

• Report assigned incident and control status; assist with customer, reseller, abuse and project tasks delegated by the division lead.

Authority and access

Each assignment defines the cases, systems, access and deliverables. Analyst access on assigned monitoring and vulnerability systems and read-only access to infrastructure are granted as needed. Infrastructure changes or incident containment require specific authorization. Business owners retain risk acceptance and access approval; high-risk go-live decisions follow the approved review process.

Required profile

• Understanding of security events, basic networking, operating systems, access control and common web or endpoint threats.

• Ability to analyze logs, document incidents clearly, protect evidence and follow up systematically with action owners.

• Ability to maintain registers, use ticketing and reporting tools, and explain findings to technical and non-technical colleagues.

Useful experience: SIEM or log platforms, vulnerability tracking, ISO 27001 or NISSA-aligned controls, ISP security operations and supplier assurance. Relevant education, training or equivalent hands-on experience is accepted.