Cybersecurity Analyst

About the role

The Cybersecurity Analyst will lead and coordinate information security programs, safeguarding YASREF’s computers, servers, mobile devices, networks, industrial control systems and data from malicious attacks. This role is responsible for implementing governance, monitoring controls, and ensuring continuous compliance with internal and external security mandates.

Key responsibilities

• Determine access requirements for information and implement corresponding security programs.
• Monitor, advise on, and maintain internal cybersecurity controls.
• Develop, publish, and enforce cybersecurity policies, procedures, standards and guidelines.
• Review security violations, provide corrective guidance and prevent recurrence.
• Coordinate and execute cybersecurity projects and incident response activities.
• Conduct data classification assessments, security audits and risk assessments.
• Design cryptographic protocols for email, file and data encryption.
• Document incidents, emergency measures and test results.
• Collaborate with government, legal and law‑enforcement agencies to ensure regulatory compliance.
• Promote user security awareness across the organization.
• Support Industrial Control Systems, Electrical Automation Systems and network security operations.

Required profile

• Demonstrated experience in information security governance and control implementation.
• Familiarity with ISO 27001 information security management standards.
• Ability to conduct security audits, risk assessments and incident investigations.
• Strong understanding of regulatory and legal security requirements.

Required skills

• ISO 27001 compliance
• Industrial Control Systems (ICS) security
• Electrical Automation Systems security
• Network security
• Cryptographic protocols
• Incident response planning
• Risk assessment methodologies