ICT Risk Analyst at CIC Insurance

PURPOSE:

The ICT Risk Analyst will play a crucial role in safeguarding our digital assets, ensuring regulatory compliance, and enhancing our overall security strategy. You will leverage your expertise in risk assessment, threat analysis, and security technologies to protect our organization in an ever-evolving threat landscape.

 PRIMARY RESPONSIBILITIES:

1. Risk Management & Assessment
   • Spearhead quarterly risk assessments across IT infrastructure
   • Identify vulnerabilities and develop mitigation strategies
   • Maintain and optimize our ICT risk control register
2. Security Monitoring & Incident Response
   • Lead proactive network monitoring using advanced tools
   • Investigate and respond to security alerts with urgency
   • Contribute to our incident response planning and execution
3. Threat Intelligence & Analysis
   • Conduct in-depth analysis of emerging cyber threats
   • Translate complex threat data into actionable insights
   • Collaborate with IT teams to implement preventative measures
4. Compliance & Policy Development
   • Ensure adherence to regulatory requirements
   • Contribute to the evolution of our security policies
   • Conduct regular ICT compliance attestations and reporting
5. Reporting & Stakeholder Management
   • Deliver compelling risk assessment presentations to leadership
   • Develop and nurture relationships with key stakeholders
   • Drive security awareness initiatives across the organization

Key Skills, Knowledge, Experience and Behavioural Competencies
Academic and Professional Requirements

• Education      Bachelor’s Degree    Degree in Cybersecurity, IT, or related field
• Professional Qualification    CISSP, CISA, or CRISC required; CEH or OSCP a plus

Experience Required:

Relevant experience    3 years