Information Security Analyst - Information Security & IT Governance Department

We’re a leading financial institution, a key player in the Maltese market and part of a highly diversified multi-national group of companies. Employing a team of over 270 employees, the Bank offers a full range of lending and savings solutions to both personal and business customers. We strive to offer a highly personalised service through our network of thirteen retail branches spread across the Maltese Islands. 

‍We’re a team of inspired people who believe that opportunities start with a conversation. 

Are you passionate about cybersecurity and ready to make a meaningful impact? We’re looking for an Information Security Analyst to join our team and help safeguard our digital environment. In this role, you’ll dive into security data to detect and investigate threats, actively participate in incident response efforts, and ensure our systems are resilient and compliant. 

You’ll be hands-on with tools like SIEM, endpoint protection, and firewalls, and play a key role in shaping our security posture through policy enforcement and vulnerability management. If you thrive in a fast-paced, collaborative environment and have a sharp eye for detail, we’d love to hear from you.

• analyse security data to identify and investigate potential threats;
• participate in incident response activities, including containment and remediation;
• conduct regular vulnerability scans and coordinate follow-up actions;
• collaborate with the team to implement and enforce security policies;
• configure and maintain security tools such as SIEM, endpoint protection, and firewalls;
• produce detailed reports on incidents, compliance, and risk trends;
• research cyber intelligence and emerging threat profiles;
• communicate risks and recommendations to stakeholders;
• promote security awareness and training across the Bank;
• monitor and track mitigation of information security risks; and
• support process-level assessments and perform ad hoc duties as needed. 

We’re looking for someone who is reliable, trustworthy, and eager to learn. You should be well-organised, team-oriented, and able to communicate effectively in both English and Maltese, using a high level of business English. 

• Proficiency in threat detection tools and incident response frameworks;
• Strong analytical and problem-solving abilities;
• Experience with Linux, Windows, and network operating systems;
• Hands-on experience with EDR, SIEM, and SOAR solutions; 
• Familiarity with implementing security policies and standards; 
• Programming/scripting skills (Python, Bash, PowerShell); and
• Excellent written and verbal communication skills. 

• Developing security policies aligned with ISO27001 and EU standards;
• Designing and assessing security control frameworks (e.g., CIS Controls, OWASP ASVS, COBIT);
• Conducting audits and assessments under ISO27001 and related standards;
• Knowledge of information risk management, threat scenarios, and GRC practices;
• Holding certifications such as CISSP, CISM, CISA, CRISC, ISO27001 Lead Implementer/Auditor; and
• Prior experience in a similar role within a financial services institution is a strong asset. 

• A Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or a related technical field; and
• Minimum of 4 years’ experience in IT, including at least 2 years in an Information Security role.