Information Security Analyst

Role overview

Join Dotdigital as an Information Security Analyst to help protect the organization’s people, products, platforms, and data. This is a hands-on role focused on monitoring, vulnerability management, cloud/identity security, application security support, and driving governance, risk, and compliance activities.

Key responsibilities

• Monitor and investigate security alerts and events across security tooling, cloud environments, business systems, and applications
• Own day-to-day vulnerability management across infrastructure, cloud platforms, applications, and endpoints
• Support security for cloud and SaaS platforms by implementing and monitoring security controls
• Assist with application security, including understanding and addressing common security risks (incl. OWASP)
• Contribute to governance, risk, and compliance (GRC) efforts
• Produce security metrics and help promote a positive security culture
• Engage with customers and vendors, including supplier security reviews and risk assessments

Requirements

• Pragmatic, business-focused approach to security
• Strong communication skills with technical and non-technical stakeholders
• Knowledge of Identity and Access Management (IAM) principles
• Experience in a Security Analyst / Cyber Security / Information Security-type role with demonstrable security responsibilities
• Experience with vulnerability management and remediation tracking to reduce security risk
• Hands-on experience with a range of security technologies
• Understanding of security operations and incident response processes
• Working knowledge of cloud security concepts and controls (major cloud providers)
• Understanding of data protection and privacy requirements
• Ability to manage multiple priorities and work independently in a fast-paced environment

Nice-to-haves

• Experience working within a security/compliance framework such as ISO 27001
• Exposure to secure software development practices
• Familiarity with automation/scripting (e.g., PowerShell or Python)
• Security certifications such as SC-300, Security+, SC-200, AZ-500, GSEC, SSCP
• Experience supporting secure development and/or vendor risk assessments in a SaaS/technology/cloud-first environment

Location / work model

• Full remote (Cape Town, South Africa)