Cloud & Information Security Analyst

2 days ago

Karachi, Sindh, Pakistan Astera Software, Inc. Full time
Job Summary:

The Cloud & Information Security Analyst is primarily responsible for ensuring the security of our On-premises & Cloud-based infrastructure and Information Systems. The incumbent will play a critical role in identifying potential security risks, implementing measures to mitigate those risks, and maintaining compliance with industry regulations and best practices. The ideal candidate will have a strong background in cloud infrastructure, information security, and risk management.

What You'll Do
  • Evaluate and assess the security posture of On-premises & cloud-based infrastructure, applications, and services.
  • Assess and implement security tools & controls for Cloud platforms, such as AWS, Azure, or Google Cloud to enhance the organization's security posture.
  • Configure and monitor On-premises & cloud security tools and services, including firewalls, IAM (Identity and Access Management policies & permissions).
  • Perform network administrative functions for WAN connectivity, International Sites and Multi-Homing Internet Gateways. Working with international and local carriers/ISPs for global peering and circuit installations.
  • Create Policies, Custom-Categories, URL Filtering and add/remove URLs from local categories on Palo Alto (5050, 3020, 200, Panorama) and Cisco ASA (5510, 5515, 5525x, 5545x).
  • Monitor network through Cacti and firewall. Manage Firewall, VPN and security profiles.
  • Hands-on experience with Cisco and Dell Managed switch series.
  • Develop, implement, and maintain information security policies, procedures, and standards.
  • Maintain InfoSec records as per ISO 27001 standards.
  • Lead & facilitate ISO ISMS 27001 (2013 & 2022) Information security assessments and audits (Internal & External).
  • Collaborate with cross-functional teams to prepare for audits, address security concerns, and provide recommendations.
  • Conduct regular security audits and vulnerability assessments to identify potential threats and vulnerabilities.
  • Stay up to date on emerging security threats, vulnerabilities, and industry best practices.
  • Provide guidance and support to internal teams, and conduct security awareness training.
  • Contribute to the continuous improvement of the organization's security posture through risk analysis and mitigation strategies.
  • Monitor and analyze security alerts and events to identify and respond to security incidents.
  • Document security incidents and their resolution for future reference.
  • Manage M365 Infrastructure (Microsoft Admin Center, Intune) & Apps (SharePoint, OneDrive, Exchange, Teams).
What You'll Need
  • Must have CCNA, ideally CCNP | Fortinet NSE | Palo Alto PCNSA
  • Must be well-versed with ISO 27001:2013 & ISO 27001:2022 Standards.
  • Experience with regulatory compliance frameworks such as HIPAA, NIST, or GDPR, is a plus.
  • Proven experience in cloud computing platforms such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
  • Knowledge of scripting languages (e.g., SQL, PowerShell) for automation and orchestration is a plus.
  • Must be energetic, motivated, and creative for project implementation and support.
  • Bachelor's degree, preferably in Computer Science.
  • 2+ years of experience in Leading Information Security Audits.
  • 2-3+ years of experience in Cloud & On-premises Infrastructure, Network & System Administration.
#J-18808-Ljbffr

  • Information Security Analyst

    2 days ago

    Karachi, Sindh, Pakistan Abroad Work Full time

    Information Security Analyst vacancy in Karachi, PakistanJunior Information Security AnalystWe are seeking a highly motivated Junior Information Security Analyst to join our team in Karachi. As a Junior Information Security Analyst, you will work with senior analysts to protect our company's data and systems from cyber threats. This is an excellent...

  • Information Security Analyst

    2 weeks ago

    Karachi, Sindh, Pakistan HR Ways Full time

    About the job: Information Security AnalystClient Introduction:Our client company is a financial wellness platform that plans to change the way you receive and spend your salary.Job Description:Purpose:The ideal candidate will be responsible for managing day-to-day security-related queries, coordinating annual PCI-DSS and ISO 27001 compliance projects, and...

  • Information Security Analyst

    3 weeks ago

    Karachi, Sindh, Pakistan Syhtek Full time

    The Information Security Analyst will safeguard Syhtek's digital assets and IT infrastructure. You will monitor and defend against security threats, ensuring compliance with policies and regulations. You will be instrumental in identifying vulnerabilities and implementing security measures to protect our clients and internal systems. Join our team to protect...

  • Information Security Manager

    3 weeks ago

    Karachi, Sindh, Pakistan Bit-Development Full time

    Get AI-powered advice on this job and more exclusive features.Direct message the job poster from Bit-Development.devBuilding High-Impact Tech Teams | Talent Acquisition Expert | Tech & Non-Tech Recruiter | Head Hunter | HR Manager | Strategic Recruitment Partner |Information Security ManagerReporting to: Chief Technology OfficerExperience: 10+ yearsLanguage:...

  • Senior DevOps and Cloud Security Engineer

    4 weeks ago

    Karachi, Sindh, Pakistan Contour Software Full time

    Senior DevOps and Cloud Security EngineerJoin to apply for the Senior DevOps and Cloud Security Engineer role at Contour SoftwareSenior DevOps and Cloud Security EngineerJoin to apply for the Senior DevOps and Cloud Security Engineer role at Contour SoftwareGet AI-powered advice on this job and more exclusive features.About ContourContour Software has grown...

  • Chief Information Security Officer

    4 weeks ago

    Karachi, Sindh, Pakistan bank Full time

    Bank Makramah is seeking a seasoned and highly strategic Chief Information Security Officer (CISO) to lead its information security initiatives at the Head Office in Karachi. The ideal candidate will be responsible for developing, implementing, and maintaining the organization's information security framework to protect digital assets, systems, and data...

  • Assistant Manager Information Security

    3 weeks ago

    Karachi, Sindh, Pakistan VRG (Pvt) Ltd. Full time

    Job Description:Dear All,We are looking to hire Asst. Manager - Information Security – Financial ServicesJob description:Working with all business units to determine possible risks and risk management process, acquiring the correct technology and analyzing IT security threats and their mitigation.Ensuring the newly acquired technology complies with the SBP...

  • Manager Information Security Governance

    3 weeks ago

    Karachi, Sindh, Pakistan Faysal Bank Limited Full time

    Job Responsibilities:Acted as the coordinator for both internal and external audits, as well as SBP inspections, focusing on the information security function.Managed standards compliance initiatives as the project manager, including PCI DSS, ISO 27001, and SWIFT CSCF.Served as the custodian of tagged issues and monitored progress related to Board...

  • Network, Security

    3 days ago

    Karachi, Sindh, Pakistan Astera Software, Inc. Full time

    Job SummaryAstera Software is looking for a dynamic and experienced Network, Security & Communications Manager to develop and manage our network infrastructure and security strategies. In this role, you'll lead the design, implementation, and maintenance of a secure and scalable network, ensuring high availability of services, including LAN/WAN, wireless,...

  • Manager Cyber Security

    2 weeks ago

    Karachi, Sindh, Pakistan VRG (Pvt) Ltd. Full time

    Job Description:Dear All,We are seeking a highly skilled and experienced Manager Cyber Security – Financial Services to lead and enhance our cybersecurity strategy, governance, risk management, and incident response in the financial services sector. The ideal candidate will be responsible for ensuring the security, confidentiality, integrity, and...