Junior Information Security Analyst

About the role

TOPPAN Security, the international development arm of the TOPPAN Group in the security domain, is looking for a Junior Information Security Analyst based in Malta. The role supports the operation and continuous improvement of the Information Security Management System (ISMS) and helps ensure compliance with information security, certification and regulatory obligations. It reports to the Senior IT & Physical Security Manager.

Key responsibilities

• Maintain ISMS records such as the risk register, Statement of Applicability, control ownership and document control, and keep policies and procedures up to date.
• Support the annual control testing programme by collecting, validating and organising evidence, and maintain corrective action trackers.
• Prepare evidence for internal and external audits, surveillance assessments, recertification and multisite certification, and draft responses to auditor requests.
• Conduct risk assessments, maintain risk records and prepare ISMS performance data and KPI reports for management reviews.
• Support PKI operations and governance, including certificate policy and certification practice statement documentation, and eIDAS conformity assessments.
• Support SIEM activities, including alert triage and performance reporting, and assist with vulnerability management, scan scheduling, result validation and false-positive investigation.

Required profile

• At least 2 years of experience in information security, IT security, risk management, compliance, audit or a related field.
• Basic understanding of ISMS and information security principles.
• A relevant degree or qualification in IT, Cybersecurity, Information Security or a related discipline is desirable.
• Good written and verbal communication skills in English.

Required skills

• Familiarity with ISO/IEC 27001 is desirable; exposure to ISO 14298, eIDAS or other regulated environments is an advantage.
• Understanding of risk assessments, security controls, audit processes and compliance documentation.
• Exposure to SIEM platforms, security monitoring or vulnerability management is desirable.
• Strong documentation, reporting and record-keeping skills.

Occasional international travel, typically around twice per year for audits, may be required.