Senior Security Analyst

Job Description:

Key Responsibilities

•    Communications: Communicate and support adherence of Dentsu Security policy and standards within the market. 
•    Work with central security teams to ensure policy, standards, and projects consider global and regional nuances.
•    Lead risk and control assessment process, reporting risk outputs and metrics to business and security stakeholders as required.
•    Evaluate, review, and prepare updates to the risk register and follow information and cyber risk remediations to closure.
•    Support the completion of thorough assessments of in-scope systems, applications, processes and locations to establish information security risks and control gaps.
•    Support the Cyber Operations team with monitoring and tracking the remediation of technical vulnerabilities in the functions. Manage escalation with technology stakeholders as required.
•    Provide support for security incidents, including assessing the scope and impact of incidents and following appropriate policies and procedures.
•    Audit & Assurance: Engage with Internal Assurance and Internal Audit teams to ensure functional audits findings are tracked and managed.
•    Training and Awareness: Drive a culture of understanding and awareness around Information Security risks throughout the global functions.
•    Build relationships and partner with key members of the global functions team
•    Assist in developing and contributing to management reporting and presentations. 

Professional Skills & Key Experiences 

•    Achieved or working towards an information security qualification (CISSP, CISM, CISA, CRISC, ISO27001 Lead Auditor/Implementor) (desirable)
•    Effective working knowledge of ISO 27001 and maintenance of an ISMS
•    Experience of security compliance initiatives within an enterprise technology environment such as NIST CSF, CSA, PCI DSS, Cyber Essentials Company confidential
•    Experience operating in a matrixed organisation to meet requirements of diverse stakeholders. 
•    Experience of acting as internal security consultant for project teams and business partners. 
•    Track record of supporting information security in a diverse, fast-paced enterprise environment. Knowledge of all domains within security covering people, process and technology 
•    Understanding of security risk analysis techniques 
•    Understanding of network architecture, protocols and principles (desirable) 
•    Working knowledge of global data protection legislation 
•    Ability to explain technical complex concepts to non-technical audiences combined with excellent communication and organisational skills 
•    Experienced with IT assurance functions and auditing techniques 
•    Excellent written and verbal communication skills and able to be understood by both technical and nontechnical personnel 
•    Stakeholder management and interpersonal skills at both a technical and non-technical level 
•    Diligent and thorough approach to problem solving 
•    Interest in their own personal development within security 
•    Understanding of emerging methodologies, technologies, architectures, and philosophies in the Cyber/Information Security portfolio. 
•    Comfortable with managing uncertainty, ambiguity, and change to make decisions and recommendations

Location:

Brand:

Time Type:

Contract Type: