Cyber Security Control Operations Analyst

Role Purpose

The purpose of the Cyber Security Control Operations Analyst monitors, manages, and optimizes security controls to defend systems, networks, and applications while maintaining operational excellence by validating control performance, detecting anomalies, and ensuring compliance with organizational and regulatory standards.

Key Responsibilities

•Configure, execute, and maintain cybersecurity measures across endpoints, networks, and cloud platforms.

•Administer tools to detect and prevent malware, ransomware, and unauthorized access on user devices.

•Enforce Data Loss Prevention (DLP) and data classification policies, ensuring encryption, labelling, and access control compliance.

•Monitor and enhance email filtering systems and web content controls to block phishing, spoofing, spam, and malicious traffic.

•Operate threat intelligence platforms to detect anomalous behavior and potential data exfiltration from within the organization.

•Analyze external threat feeds and incorporate findings into incident response and security operations.

•Configure and monitor endpoint security controls to maintain a strong cybersecurity hygiene posture.

•Perform regular scans, penetration tests, and patch deployments to identify and remediate system and application vulnerabilities.

•Generate reports on control effectiveness, incident trends, and maintain detailed documentation of configurations and audit trails.

•Work with cross-functional teams to align security with business needs and stay updated on emerging threats and best practices.

Must have Technical / Professional Qualifications

•Bachelor's degree in cyber or information security, computer science, information technology (or systems)

or other related fields.

•2+ years of progressive experience in cybersecurity or related fields in cybersecurity, with a significant focus on hands-on technical security work.

•Any of the certifications below or equivalent certifications will be desired;

CompTIA Security+, CompTIA CySA+, (ISC)² Systems Security Certified Practitioner (SSCP), GIAC Security Essentials (GSEC), ISACA Certified Cybersecurity Operations Analyst (CCOA).

•Skilled in configuring and monitoring endpoint protection platforms, firewalls, and intrusion detection/prevention systems to maintain strong cyber hygiene.

•Demonstrates ability to operate malware prevention, SIEM, and threat intelligence platforms, interpreting alerts and escalating incidents effectively.

•Apply DLP solutions, encryption standards, and data classification frameworks to ensure sensitive information is safeguarded and regulatory requirements are met.

•Competent in conducting scans, penetration testing, and patch deployments, with the ability to prioritize and remediate vulnerabilities within defined SLAs.

•Experienced in configuring cloud security controls (e.g., IAM, monitoring) and enhancing email/web filtering systems to defend against phishing, spoofing, and malicious traffic.