Responsibilities

1. Cybersecurity Management

Track, manage, and escalate cybersecurity incidents and critical threat events as required.
Disseminate security advisories, threat intelligence, directives, and patch recommendations promptly.
Conduct information security awareness training to foster a security-conscious culture.
Lead or assist in tabletop exercises and risk management activities to improve incident response readiness.

2. Security Product Management

Perform vulnerability scanning and security assessments on applications (client/server, mobile) using standard tools such as Tenable and Nessus.
Analyze scan results, recommend remediation actions, and track resolution.
Utilize Splunk or similar tools for security event monitoring, log collection, and incident analysis.
Conduct onboarding and vulnerability scans for devices before connecting to the corporate network.

3. Compliance and Reviews

Conduct periodic security audits to ensure adherence to ICT and cybersecurity incident response plans.
Perform security assessments of ICT systems, including log analysis and reporting.
Recommend and support security improvements based on audits and emerging threats.

4. Network and Security Integration

Manage, configure, and optimize security tools for effective integration with IT infrastructure.
Implement, update, and maintain security policies, technical baselines, and SOPs.
Monitor compliance with secure configuration standards across systems and devices.

5. Documentation and Reporting

Maintain documentation of security incidents, vulnerability assessments, checklists, controls, and policies.
Prepare regular reports on security metrics, incident trends, compliance, and risk mitigation.
Ensure timely escalation of major incidents to management and stakeholders.

6. Collaboration and Advisory

Work closely with IT teams and vendors to implement and maintain security solutions.
Provide security guidance for projects, system implementations, and procurement to embed security-by-design principles.
Align security practices with organizational cybersecurity strategies and compliance requirements.

7. Core Expertise Areas

Information Security Governance: Policies, standards, procedures, regulatory compliance, risk assessments.
Security Architecture: Zero-trust models, micro-segmentation, secure cloud architectures.
Identity & Access Management (IAM): IAM solutions, MFA, SSO, privileged access management.
Threat Detection & Response: SIEM management, EDR solutions, incident response planning.
Vulnerability Management: Vulnerability assessments, penetration testing, patch management, remediation strategies.
Data Protection: DLP strategies, encryption technologies, data classification and handling.
Compliance & Auditing: Internal and external audits, documentation for regulatory compliance.
Third-Party Risk Management: Vendor security assessments, enforcing security requirements in contracts.
Operational Technology Security: Industrial control system security principles.
Contract, Change, and Incident Management: Oversight of service requests, incidents, and problem resolution.

Requirements

Bachelor's degree in Computer Science, IT, Cybersecurity, or related discipline.
Professional certifications such as CISSP, CISM, GIAC, or equivalent are advantageous.
Minimum 10 years in managing enterprise-level information security programs.
Hands-on experience with security tools such as Tenable, Nessus, and Splunk.
Strong knowledge of vulnerability management, threat analysis, incident response, secure network design, endpoint security, and system hardening.
Familiarity with ICT security compliance frameworks, cybersecurity standards, and risk management practices.
Strong analytical and problem-solving skills with attention to detail.
Effective written and verbal communication able to articulate security risks and recommendations.
Ability to work independently and collaboratively in a fast-paced environment.
Proactive mindset with continuous improvement attitude toward cybersecurity operations.

IT Security Officer