IT Security Governance & Planning Analyst

About the role

The IT Security Governance & Planning Analyst will support the development and implementation of cybersecurity governance frameworks aligned with ISO 27001, NIST and other standards. The role involves analysing business needs, conducting risk assessments and providing data‑driven insights to senior stakeholders.

Key responsibilities

• Assist in creating and applying cybersecurity governance frameworks (ISO 27001, NIST).
• Conduct security risk assessments, track mitigation actions and support incident response planning.
• Perform data analysis to identify security trends, vulnerabilities and performance gaps.
• Develop and monitor KPIs and metrics to measure effectiveness and compliance.
• Prepare progress reports, dashboards and executive presentations.

Required profile

• Experience in IT security, GRC or strategic planning roles.
• Proven ability to develop KPIs, create security performance reports and present to senior stakeholders.
• Solid understanding of cybersecurity frameworks, risk management and compliance.

Required skills

• Data analysis
• Cybersecurity governance frameworks
• PowerPoint
• NIST standards
• Security risk assessments
• ISO 27001
• Microsoft Excel