Junior Information Security Analyst

TOPPAN Security

. Support the operation and continuous improvement of TOPPAN Security's Information Security Management System (ISMS) .

Posted 11/4/2026full-timeMaltaJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security Management Systems (ISMS), risk management, and compliance documentation, with strong skills in documentation, reporting, and audit preparation. Capable of conducting risk assessments and maintaining regulatory obligations while ensuring accuracy and attention to detail.

Highest-signal resume keywords

Information Security Management System (ISMS)Risk AssessmentCompliance DocumentationAudit ProcessesISO/IEC 27001

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementControl TestingDocument ControlPerformance ReportingVulnerability ManagementSecurity ControlsKPI ReportingEvidence CollectionAudit Findings TrackingContinuous Improvement

Soft Skills

Attention to DetailAnalytical Problem-SolvingStrong Organisation SkillsGood Communication SkillsInterpersonal Skills

Tools & Technologies

SIEM PlatformsSecurity MonitoringKey Management RecordsAudit EvidenceEIDAS Compliance

Certifications & Qualifications

ISO 27001 FoundationLead ImplementerLead Auditor

Industry Keywords

ISO 14298Regulated Security EnvironmentsInformation Security PrinciplesCompliance AssessmentsControl Ownership

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support the operation and continuous improvement of TOPPAN Security's Information Security Management System (ISMS)
Maintain ISMS records, including the risk register, Statement of Applicability, control ownership and document control
Support annual control testing by collecting, validating and organising evidence
Maintain corrective action and continuous improvement trackers, monitor deadlines and escalate delays
Keep information security policies, procedures and supporting documentation accurate and up to date
Prepare evidence for internal and external audits, surveillance assessments, recertification and multisite certification activities
Support compliance and conformity assessments across certified and regulated activities
Maintain the regulatory obligations register and monitor new or amended requirements
Draft responses to auditor and assessor requests for review
Track audit findings and corrective actions through closure
Conduct risk assessments using the approved methodology
Maintain risk assessment records and monitor identified risks and controls
Prepare ISMS performance data, KPI reports and management review inputs
Identify gaps or inconsistencies in control evidence and escalate them to the Security Manager
Support PKI operational and governance activities, including ceremony documentation, key management records and audit evidence
Maintain Certificate Policy (CP) and Certification Practice Statement (CPS) documentation
Support eIDAS conformity assessments and qualified trust service documentation
Support SIEM activities, including alert triage, performance reporting and detection rule improvement proposals
Assist with vulnerability management, including scan scheduling, result validation and false-positive investigation
Support risk-based vulnerability prioritisation
Track remediation activities and follow up with relevant teams

Requirements

What you’ll need

At least 2 years of experience in information security, IT security, risk management, compliance, audit or a related field
Basic understanding of ISMS and information security principles
Understanding of risk assessments, security controls, audit processes and compliance documentation
Strong documentation, reporting and record-keeping skills
Good written and verbal communication skills in English
Strong attention to detail and accuracy
Analytical and methodical approach to problem-solving and risk assessment
Strong organisation skills and ability to manage documentation, deadlines and multiple activities
Ability to follow established methodologies, procedures and evidence standards
Ability to handle confidential and sensitive information with discretion
Good communication and interpersonal skills with technical and non-technical stakeholders
Willingness to learn and develop security standards, regulations and technologies
Occasional international travel may be required, typically around twice per year
Familiarity with ISO/IEC 27001 is desirable
Exposure to ISO 14298, eIDAS or other regulated security environments is an advantage
Exposure to SIEM platforms, security monitoring or vulnerability management is desirable
A relevant degree or qualification in IT, Cybersecurity, Information Security or a related discipline is desirable
ISO 27001 Foundation, Lead Implementer, Lead Auditor or other relevant security certifications are an advantage

Benefits

Comp & perks

International, collaborative and fast-moving work environment
Career development opportunities
Work with international teams
Contribution to mission-critical technology and security solutions
Hybrid work arrangement
Equal opportunity employment