IT Security Officer

Responsibilities:

• Incident Response & Cybersecurity Management
• Track, escalate, and manage cybersecurity incidents and threats.
• Disseminate security advisories, reports, and patch recommendations.
• Conduct staff security awareness training and tabletop exercises.
• Product Management
• Perform vulnerability assessments on applications and devices (Tenable, Nessus).
• Monitor and analyze security events using SIEM tools (e.g., Splunk).
• Onboard devices securely and ensure cyber hygiene compliance
• Security Reviews
• Conduct periodic security reviews and audits.
• Recommend improvements based on audit findings and threat intelligence.
• Maintain adherence to ICT and cybersecurity policies, standards, and regulations.
• Security Integration
• Manage and optimize security tools and platforms.
• Maintain SOPs, technical baselines, and secure configuration standards.
• Documentation and collaboration advisory
• Maintain incident, vulnerability, and security documentation.
• Deliver reports on security metrics, trends, and risk mitigation.
• Ensure timely escalation of major incidents
• Work with IT teams and vendors to implement security solutions
• Provide advisory support for projects, system implementations, and procurement
• Align security practices with organizational strategies and compliance requirements.
• Core Project & Technical Expertise
• Governance: Security policies, risk assessments, compliance (ISO 27001, GDPR, HIPAA).
• Architecture: Zero-trust, micro-segmentation, cloud security.
• IAM & PAM: MFA, SSO, privileged access management.
• Threat Detection & Response: SIEM, EDR, incident response planning.
• Vulnerability Management: Scanning, patch management, penetration testing.
• Data Protection: DLP, encryption, data classification.
• Compliance & Auditing: Internal/external audits, documentation, regulatory adherence.
• Third-Party Risk: Vendor security assessment and enforcement.
• OT Security: Industrial control systems and SCADA protection.

Requirements:

• Bachelor's in Computer Science/IT, Cybersecurity or related
• Profressional certification such as CISSP, CISM, GIAC