ICT Risk Analyst at CIC Insurance

PURPOSE:

The ICT Risk Analyst will play a crucial role in safeguarding our digital assets, ensuring regulatory compliance, and enhancing our overall security strategy. You will leverage your expertise in risk assessment, threat analysis, and security technologies to protect our organization in an ever-evolving threat landscape 

PRIMARY RESPONSIBILITIES:

Risk Management & Assessment

• Spearhead quarterly risk assessments across IT infrastructure
• Identify vulnerabilities and develop mitigation strategies
• Maintain and optimize our ICT risk control register

Security Monitoring & Incident Response

• Lead proactive network monitoring using advanced tools
• Investigate and respond to security alerts with urgency
• Contribute to our incident response planning and execution

Threat Intelligence & Analysis

• Conduct in-depth analysis of emerging cyber threats
• Translate complex threat data into actionable insights
• Collaborate with IT teams to implement preventative measures

Compliance & Policy Development

• Ensure adherence to regulatory requirements
• Contribute to the evolution of our security policies
• Conduct regular ICT compliance attestations and reporting

Reporting & Stakeholder Management

• Deliver compelling risk assessment presentations to leadership
• Develop and nurture relationships with key stakeholders
• Drive security awareness initiatives across the organization

Key Skills, Knowledge, Experience and Behavioural Competencies
Academic and Professional Requirements

• Education    Bachelor’s Degree    Degree in Cybersecurity, IT, or related field
• Professional Qualification    CISSP, CISA, or CRISC required; CEH or OSCP is desirable

Experience Required:

Qualifications & Skills Required:

• At least 3 years relevant experience in a similar role.
• Excellent communication and presentation skills
• Problem solving skills
• Excellent interpersonal skills
• Good analytical skills