Information Security Analyst

This is an analyst position with responsibility for working on information security initiatives globally for ICON. The role requires a mix of information security, risk management, project management, and people management skills.

The information security analyst will take ownership of projects and processes which enhance the security risk posture within ICON.

Key responsibilities will include:

1. ·         Developing information security policies and procedures.
2. ·         Implementing processes to measure compliance to ICON’s information security and technical security standards.
3. ·         Assisting in management of ISO27001 information security management system.
4. ·         Supporting and coordinating periodic ISO27001 surveillance audits.
5. ·         Supporting and assisting with the supply chain risk management process activities.
6. ·         Assisting and supporting risk assessments and business impact assessments with business and technical stakeholders.
7. ·         Assisting with the delivery of information security awareness and behavioral change program.
8. ·         Performing daily Data Loss Prevention analysis tasks and reporting activities.

Key requirements and experience:

• ·         Proven experience in Information Security;
• ·         Ability to work with geographically dispersed operational teams;
• ·         Understanding of IT and Information security techniques and methodologies.
• ·         Ability to translate and communicate technical issues into understandable and meaningful business risk;
• ·         Have experience in influencing and negotiating with relevant stakeholders to work towards solutions and will have a positive “can do” attitude;
• ·         Analytical, problem solving and communication skills;
• ·         Ability to work in a high pressure, fast paced environment with rapidly shifting priorities; ability to learn new technology and concepts quickly
• ·         Ability to verify control effectiveness for standards such as SOX, ISO27001, CIS standards, NIST CSF & contractual requirements.
• ·         Can work with various teams and the business to implement corrective actions for control deficiencies

Preferences: 

-Bachelor’s degree or equivalent program in Computer Science, Business Information Systems, Information Security or Information Technology (or equivalent work experience)

-2+ years of experience of information security or audit (internal or external) experience in a regulated environment;