Senior Information Security Analyst
About the role
The Senior Information Security Analyst at TechCERT will be responsible for conducting information security and IT general controls audits, performing gap assessments and compliance reviews, and providing consultancy based on industry standards and regulatory requirements. The role involves developing and enhancing security policies, participating in compliance implementation projects, evaluating security controls, conducting training sessions, preparing reports, and managing client engagements. Candidates should have a bachelor's degree in IT or a related field and at least 3 years of experience in information security governance and audits. The position offers the opportunity to work with a dedicated team protecting critical technology infrastructure in Sri Lanka.
Must have
- Bachelor’s degree in information technology, Cyber Security, or related field.
- 3+ years of experience in information security governance and IS audits. Sound knowledge of information security principles, IT governance, risk management, and compliance frameworks.
- Familiarity with ISO/IEC 27001, ISO/IEC 27035, ISO/IEC 27701, PCI DSS, CBSL TRMF, and Sri Lanka PDPA.
- Ability to conduct IS/ITGC audits, compliance gap assessments, and information security implementation consultancy engagements.
- Strong analytical skills with the ability to identify control weaknesses and recommend practical remediation measures.
- Excellent verbal and written communication skills, with strong technical and professional report-writing capabilities.
- Ability to work independently, manage multiple assignments, and collaborate effectively with clients and internal teams.
- General understanding of security technologies such as IAM, SIEM, FIM, PAM, Firewall, WAF etc.
Technologies
- Firewall
- IAM
- PCI DSS
- SIEM
- WAF
Highlights
Interested candidates should send their CVs by email to recruitment@techcert.lk and mention the post applied for in the subject line.