Up Hellas

Security Analyst

• Maintain, review, and enhance existing cybersecurity policies, procedures, and controls in line with NIST, NIS2, and Group Security requirements.
• Serve as the primary point of contact with the Group Security function, coordinating timely implementation of annual policy updates and new security mandates.
• Lead the ongoing development and maintenance of our ISO 27001 Information Security Management System (ISMS), ensuring audit readiness.
• Conduct regular risk assessments, control validations, and internal compliance checks.
• Prepare periodic security governance reports for management and Group stakeholders.
• Monitor and manage daily alerts from our XDR platform, including triage, investigation, escalation, and resolution tracking.
• Support incident response processes and coordinate remediation activities across internal teams and Group Security when needed.
• Contribute to endpoint, identity, and network security hardening initiatives.
• Assist with vulnerability scanning cycles and track remediation progress with responsible teams.
• Contribute to the creation of operational playbooks and improvement of security workflows.
• Design and execute phishing simulation campaigns, analyze results, and provide actionable insights.
• Maintain and evolve the security awareness program, ensuring alignment with Group standards.
• Lead targeted security improvement projects such as MFA enhancements, access control reviews, and secure onboarding/offboarding processes.
• Act as a cybersecurity ambassador across the organization, promoting secure behavior and best practices.

Information Security Analyst