At TOPPAN Security, our mission is to shape a meaningful, technology-driven future by being a global leader in mission-critical identity and payment technologies.

We are the international development arm of the Toppan Group in the security domain, founded in 1900. Toppan is a trusted Japanese brand renowned for exceptional quality. We combine bold ideas, deep sector expertise and collaborative intelligence to deliver secure, future-ready solutions.

Our culture is grounded in four core values: agility, ownership, resilience, and a sense of fun. We move fast, lead with accountability, grow through challenges and bring positive energy into everything we do.

About the Role and What You'll Do

The Junior Information Security Analyst supports the operation and continuous improvement of Toppan Security's Information Security Management System (ISMS), helping ensure compliance with information security, certification and regulatory obligations.

Based in Malta and reporting to the Senior IT and Physical Security Manager, you will support security assurance activities across the organisation. This includes maintaining security documentation and risk registers, coordinating control testing, preparing audit evidence, supporting compliance assessments, and assisting with security monitoring and vulnerability management.

You will collaborate with internal stakeholders and specialist teams to maintain accurate records, track corrective actions, and support the implementation of security controls in line with established standards and methodologies.

ISMS Operation and Maintenance
- Maintain key ISMS records, including the risk register, Statement of Applicability, control ownership and document control.
- Support the annual control testing programme by collecting, validating and organising evidence in accordance with defined standards.
- Maintain corrective action and continuous improvement trackers, monitoring deadlines and escalating delays.
- Ensure information security policies, procedures and supporting documentation remain accurate and up to date.
Compliance and Audit Support
- Prepare evidence for internal and external audits, surveillance assessments, recertification and multisite certification activities.
- Support compliance and conformity assessments across the organisation's certified and regulated activities.
- Maintain the regulatory obligations register and monitor new or amended requirements for review by the Security Manager.
- Draft responses to auditor and assessor requests for review by the Security Manager.
- Track audit findings and corrective actions through to closure.
Risk Assessment and Performance Reporting
- Conduct risk assessments using the organisation's approved methodology.
- Maintain risk assessment records and support the monitoring of identified risks and controls.
- Prepare ISMS performance data, KPI reports and inputs for management reviews.
- Identify gaps or inconsistencies in control evidence and escalate them to the Security Manager.
Trust Services and PKI Support
- Support PKI operational and governance activities, including ceremony documentation, key management records and audit evidence.
- Maintain Certificate Policy (CP) and Certification Practice Statement (CPS) documentation, helping ensure documented practices reflect operational activities.
- Support eIDAS conformity assessments through evidence preparation, assessor coordination and tracking findings to closure.
- Maintain documentation and evidentiary records required for qualified trust service provision.
Security Monitoring and Vulnerability Management
- Support Security Information and Event Management (SIEM) activities, including alert triage, performance reporting and proposals for detection rule improvements.
- Assist with vulnerability management, including scan scheduling, result validation and false-positive investigation.
- Support risk-based vulnerability prioritisation using the approved methodology.
- Track remediation activities and follow up with relevant teams to ensure timely resolution.

About You

Experience and Knowledge
- At least 2 years of experience in information security, IT security, risk management, compliance, audit or a related field.
- Basic understanding of ISMS and information security principles.
- Familiarity with ISO/IEC 27001 is desirable; exposure to ISO 14298, eIDAS or other regulated security environments is an advantage.
- Understanding of risk assessments, security controls, audit processes and compliance documentation.
- Exposure to SIEM platforms, security monitoring or vulnerability management is desirable.
- Strong documentation, reporting and record-keeping skills.
- A relevant degree or qualification in IT, Cybersecurity, Information Security or a related discipline is desirable.
- ISO 27001 Foundation, Lead Implementer, Lead Auditor or other relevant security certifications are an advantage.
- Good written and verbal communication skills in English.
Key Competencies
- Strong attention to detail and accuracy, particularly when maintaining security records and audit evidence.
- Analytical and methodical approach to problem-solving and risk assessment.
- Strong organisational skills and ability to manage documentation, deadlines and multiple activities.
- Ability to follow established methodologies, procedures and evidence standards.
- Ability to handle confidential and sensitive information with discretion.
- Good communication and interpersonal skills, with the ability to work with technical and non-technical stakeholders.
- Willingness to learn and develop knowledge of security standards, regulations and technologies.
Work Requirements
- Occasional international travel may be required, typically around twice per year for audits and other business purposes.

Why Join Toppan Security?

Join a global, collaborative and fast-moving environment where people, trust and innovation matter.

At Toppan Security, you will work with international teams, contribute to mission-critical technology and security solutions, and develop your career in an organisation that values Agility, Ownership, Resilience, and a Sense of Fun.

Toppan Security is an Equal Opportunity Employer. All qualified candidates will be considered without regard to gender, sexual orientation, age, colour, religion, national origin, veteran status, disability or any other protected characteristic.

Junior Information Security Analyst

Job Description