IT Security Analyst at Nestoil Plc

We are on an evolutionary journey where we are changing our story. We are looking to hire an experienced IT Security Analyst to join our diverse team in our Company.

In this role, you will be responsible to provide continuous onsite knowhow within the ICT Department to help maintain the confidentiality, integrity, and availability (CIA) of IT systems and information. The candidate will deploy and employ technology tools and skill for proactive and reactive monitoring of all IT infrastructure and application services

As an IT Security Analyst, you will be responsible for:

• Analyzing network security protocols, technologies, and architectures including Cloud computing models.
• Implementing and managing firewalls including intrusion detection and prevention systems.
• Conducting security risk assessments and developing risk mitigation strategies
• Recommending security updates and patches across platforms
• Knowledge of security standards and frameworks such as ISO 27001, NIST, and CIS.
• Performing IT security audit
• Monitoring and responding to the Sophos MDR notifications
• Providing monthly security training to all users
• Strong communication and interpersonal skills to effectively collaborate with cross-functional teams and convey complex security concepts to non-technical stakeholders.
• Ability to work under pressure and respond quickly to security incidents or emerging threats.
• Familiarity with vulnerability assessment tools, network scanning techniques, and penetration testing methodologies.
• Familiarity with FortiGate Firewall series and Fortinet Analyzer

What are we looking for?

• Bachelor’s degree in Computer Science, Information Security, or a related field
• Certified Information Security Manager (CISM), Microsoft Certified Identity and Access Administrator, Microsoft Certified Information Protection Administrator, Cybersecurity Certification, Certified Information Security Professional (CISSP).
• 3 to 5 years of progressive experience in computer security, architecture, design, engineering, implementation, and administration in complex large IT networks
• Strong understanding of network protocols, operating systems, and cloud computing platforms.
• Knowledge of regulatory compliance requirements, such as GDPR or HIPAA.
• Experience with security incident response processes and tools.
• Familiarity with secure coding practices and application security principles
• Ability to work independently and as part of a team, demonstrating strong leadership and collaboration skills.
• Strong organizational skills and attention to detail to manage multiple priorities and meet deadlines.
• Knowledge of project management principles and methodologies is an advantage
• Understands information classification and the CIA objectives
• Excellent problem-solving and analytical skills to identify and address security vulnerabilities.
• Continuous learning mindset to stay updated with the evolving security landscape and emerging technologies