Security Analyst

• Support the operation and continuous improvement of TOPPAN Security's Information Security Management System (ISMS)
• Maintain ISMS records, including the risk register, Statement of Applicability, control ownership and document control
• Support annual control testing by collecting, validating and organising evidence
• Maintain corrective action and continuous improvement trackers, monitor deadlines and escalate delays
• Keep information security policies, procedures and supporting documentation accurate and up to date
• Prepare evidence for internal and external audits, surveillance assessments, recertification and multisite certification activities
• Support compliance and conformity assessments across certified and regulated activities
• Maintain the regulatory obligations register and monitor new or amended requirements
• Draft responses to auditor and assessor requests for review
• Track audit findings and corrective actions through closure
• Conduct risk assessments using the approved methodology
• Maintain risk assessment records and monitor identified risks and controls
• Prepare ISMS performance data, KPI reports and management review inputs
• Identify gaps or inconsistencies in control evidence and escalate them to the Security Manager
• Support PKI operational and governance activities, including ceremony documentation, key management records and audit evidence
• Maintain Certificate Policy (CP) and Certification Practice Statement (CPS) documentation
• Support eIDAS conformity assessments and qualified trust service documentation
• Support SIEM activities, including alert triage, performance reporting and detection rule improvement proposals
• Assist with vulnerability management, including scan scheduling, result validation and false-positive investigation
• Support risk-based vulnerability prioritisation
• Track remediation activities and follow up with relevant teams

Explore Junior Information Security Analyst at TOPPAN Security. Review requirements and application details.