Junior Information Security Analyst в KPMG Астана

As an Information Security Analyst, you will:

• Assist senior team members in conducting risk analysis and examinations of projects and vendors under close supervision.
• Support the team in performing GAP analyses between global and local information security policies by gathering data and documenting findings.
• Contribute to the development and maintenance of information security documentation (policies, procedures) by incorporating feedback and ensuring version control.
• Provide support for the implementation and configuration of security tools like SIEM (Wazuh) and WAF under the guidance of a senior engineer.
• Assist with vulnerability management processes.
• Participate in the incident response process by performing initial triage, documenting events in tickets, and following established playbooks.
• Help monitor IT infrastructure security by reviewing alert dashboards and escalating issues to senior analysts.
• Support the maintenance of the information security risk register by updating records and generating basic heat maps.

You’ll be a great fit if you:

• Hold a degree in InfoSec, CS, IT, or related field. Equivalent certifications (e.g., CompTIA Security+) with demonstrated passion also accepted.
• Have 1+ year in an InfoSec role, or relevant experience via internships, labs, or personal projects.
• Demonstrate a foundational understanding of core security tech: antivirus, firewalls, and network attack principles.
• Possess strong technical writing ability and proficiency in English (Upper Intermediate level or higher).

Preferred Qualifications

• Familiarity with security frameworks (e.g., ISO 27001, NIST, PCI DSS, OWASP Top 10).
• Basic knowledge of risk management concepts and tools (e.g., SIEM, WAF, vulnerability scanners).
• Basic scripting skills (e.g., Python, Bash, PowerShell).
• Understanding of Secure Development Lifecycle (SDLC) principles.