Information Security Analyst
Hybrid
Full Time
#Information Security
#Risk
#Vulnerability Management
#Enterprise Risk Management
#Risk Management
#Security Frameworks
#Data Analytics
#GRC
#Cloud Security
We are looking for a Junior Information Security Analyst to join our team on a full-time basis. Field Nation is a technology company that operates a web-based marketplace, connecting buyers and sellers of contract services to transform how work gets done. As a recognized Top Workplace, we pride ourselves on fostering a culture of innovation and collaboration. In this hybrid role based in Bangladesh, you will work closely with our Director of Information Security to strengthen our security, risk, and compliance programs. You will play a vital role in protecting our organization by managing third-party risks, overseeing vulnerability assessments, and helping us maintain a robust security posture across our technology stack.
Responsibilities
- Lead the vendor assessment process by evaluating new and existing third parties, monitoring their security practices, and ensuring they remain compliant with our internal standards.
- Support our vulnerability management program by identifying and prioritizing security gaps, coordinating remediation efforts with technical teams, and tracking progress through detailed reporting.
- Contribute to our enterprise risk management efforts by designing security policies, managing quarterly user access reviews, and assisting with the collection of evidence for security compliance audits.
Requirements
- A Bachelor’s degree in Cybersecurity, Information Systems, Computer Engineering, or a related field, or equivalent professional experience.
- One to three years of experience working in information security or risk management.
- A solid understanding of security frameworks such as ISO 27001, NIST, or CIS Controls.
- Strong data analytics capabilities, including proficiency with tools like SQL, Tableau, or advanced spreadsheet functions.
- Technical familiarity with security tools, including vulnerability scanners, GRC platforms, and cloud security posture management.
- Excellent communication skills with the ability to influence cross-functional teams and mentor colleagues.
What we offer
- Hybrid work model with a mix of remote and office-based days.
- Comprehensive medical insurance coverage.
- Access to a career development budget and LinkedIn Learning for professional growth.
- Fully subsidized daily lunches and gym membership.
- Performance-based rewards, annual increments, and festival bonuses.
- Flexible leave and vacation policies to support a healthy work-life balance.
- Convenient employee transportation services.
