Associate, Cybersecurity / Information Security

Key Responsibilities:

• Assist in the review, update, and maintenance of information security policies, procedures, and related documentation.

• Support policy amendments and periodic reviews to ensure alignment with business requirements, regulatory requirements, and applicable security standards.

• Assist with vulnerability assessments and security testing, including identifying, documenting, and tracking vulnerabilities through remediation.

• Support secure configuration reviews of systems, applications, and infrastructure against approved security baselines, hardening guidelines, and industry standards.

• Assist in assessing compliance with relevant security frameworks, standards, and configuration benchmarks.

• Support the preparation of security assessment reports, findings, recommendations, and audit evidence.

• Coordinate with IT and security teams to follow up on identified vulnerabilities, security gaps, and remediation activities.

• Maintain accurate records of security reviews, assessments, findings, evidence, and remediation status.

• Stay updated on cybersecurity best practices, security standards, emerging threats, and vulnerabilities.

Desired Skill Sets:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Security, or a related discipline.

• 0–3 years of relevant experience in cybersecurity, information security, GRC, vulnerability management, security assessment, or a related field.

• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), ISC2 Certified in Cybersecurity (CC), ISO/IEC 27001, CompTIA CySA+, CISA, or equivalent cybersecurity certifications are preferred.

• Basic understanding of cybersecurity, information security, risk management, and security controls.

• Familiarity with security policies, procedures, standards, and frameworks.

• Understanding of vulnerability assessment, security testing, secure configuration, and system hardening.

• Good analytical, documentation, communication, and coordination skills.

• Ability to work with technical and non-technical stakeholders.