IT Security Analyst

About the role

The IT Security Analyst will protect the organization’s information systems by designing, implementing and maintaining security policies, controls and authentication frameworks. The role ensures compliance with regulatory and client‑specific standards and acts as the primary liaison with internal and external auditors.

Key responsibilities

• Develop, implement and maintain IT security policies aligned with ISO 27001, NIST, COBIT, SOX and ITGC.
• Prepare documentation, evidence and responses for internal and external audit requests.
• Coordinate certification processes such as ISO 27001, TISAX, SOC 2 and ITGC, including gap analysis and evidence gathering.
• Track audit action plans, remediation timelines and ensure policy adherence across subsidiaries.
• Design, deploy and manage Multi‑Factor Authentication (MFA) and Single Sign‑On (SSO) solutions.
• Administer user roles, permissions and segregation of duties (SoD) in ERP and other critical systems.
• Manage user provisioning and de‑provisioning following least‑privilege principles.
• Support evaluation, implementation and configuration of GRC tools, IAM platforms and ERP security modules.

Required profile

• Proven experience in IT security governance, audit management and certification maintenance.
• Strong understanding of international security frameworks and standards.
• Ability to work cross‑functionally with IT, Finance, HR and Procurement teams.
• Excellent analytical skills for risk assessments and control reviews.

Required skills

• Multi‑Factor Authentication (MFA)
• Single Sign‑On (SSO)
• Identity and Access Management (IAM)
• Governance, Risk and Compliance (GRC) tools
• ERP security modules
• Knowledge of ISO 27001, NIST, COBIT, SOX, ITGC, TISAX, SOC 2