About this role
As an IT Security Analyst, you will actively monitor security logs, drive annual vulnerability scanning and penetration testing, and respond to malware threats. You'll act as the bridge between technical execution and governance, ensuring zero-trust access, DevSecOps alignment, and rigorous compliance across our cloud and internal systems. The Tech Stack Deep-Dive Must-Haves: Security Ops & Analysis: IT security log analysis, malware resolution, and incident assessment/remediation. Vulnerability & Testing: Vulnerability scanning, annual penetration testing coordination, and risk assessments. Standards & Compliance: ISO27001 ISMS management, Statement of Applicability, risk treatment plans, and internal/external audit management. Qualifications: Diploma / NQF Level 6 in Computer Science or Information Systems. Up to 3 years of hands-on IT Security experience. Nice-to-Haves: Cloud & Security Tech: Microsoft Azure Security Technologies (AZ-500 certification). Frameworks & Best Practices: DevSecOps lifecycle integration, ISO27001 ISMS certification, and IT Security Governance experience. Key Responsibilities Proactive Security Ops: Monitor log activity, resolve identified malware, conduct risk assessments, and support end-to-end incident response investigations. Vulnerability & Threat Management: Lead annual penetration testing and vulnerability scanning, analyze internal/external cyber threats, and enforce mitigation strategies. Governance & Audit Leadership: Maintain ISO27001 compliance documentation, complete client/supplier security audits, and manage role-based access control (RBAC) life cycles. DevSecOps & Tech Advisory: Integrate security practices into DevSecOps workflows, evaluate new security tools, and deliver security awareness training across the firm. Why Join Us? High-Impact Autonomy: Take full ownership of risk remediation and technology evaluations while directly advising business units on security best practices. Modern Security Infrastructure: Work with modern cloud environments (Azure) and stay on the cutting edge of cyber threat analysis and DevSecOps practices. Continuous Growth: Expand your expertise with access to learning and development initiatives while leading enterprise-level ISO27001 audits.