Information Security & Control Analyst

About the role

The Information Security & Control Analyst (ISCA) is responsible for implementing, continuously improving and maintaining the Information Security Management Program at HPS Payment Services. The role requires solid experience in information security and IT resilience management, with a deep understanding of standards such as ISO 27001, NIST CSF, SOC2 Type II and PCI DSS.

Key responsibilities

• Maintain the ISMS: develop and oversee security policies, procedures and guidelines, manage information security risk and ensure compliance with legal, regulatory and contractual requirements
• Evaluate inherent and residual risk with asset owners, guide risk owners on treatment options and report on ISMS performance to senior management and the board
• Supervise security awareness and training, coordinate internal and external ISMS audits and monitor and respond to security incidents
• Integrate security into projects: support project teams, define IT risk requirements, identify project risks and evaluate the security of technological solutions
• Lead the planning of security certifications and recertification, and manage the resulting action plans
• Prepare materials for client security committees, run client security committee meetings, produce vulnerability monitoring reports and analyse threats such as cyberattacks and data breaches
• Carry out regular IT risk assessments, security audits and ad hoc reviews (access rights, firewall rules), and prepare risk and security reports for leadership

Required profile

• Degree or equivalent in a related field
• 3+ years of experience in information security or a related domain
• Effective communication, collaboration across departments, conflict resolution and time management
• Raising awareness of a strong security culture

Required skills

• In-depth knowledge of information security principles, risk management, regulatory compliance, data protection and network security
• Ability to identify, assess and mitigate IT risks and manage security incidents
• Preferred certifications: COBIT, CISA, CRISC, CEH, ISO 27001 Lead Implementer, PMP, ITIL, CISSP

Candidates apply by sending a cover letter and a detailed CV to the recruiter's email; incomplete applications will not be considered. The office is located in Port-Louis.