Job Responsibilities:
System Security & Compliance
- Conduct security reviews and system hardening checks.
- Perform risk assessments based on deviations from hardening requirements (e.g., CIS Benchmarks).
- Develop and maintain Company's hardening baselines using industry benchmarks.
- Create, review, and update Standard Operating Procedures (SOPs).
- Plan and schedule annual reviews of security hardening documents.
- Perform compliance reviews and ensure timely remediation of findings.
Security Monitoring & Incident Response
- Monitor phishing alerts and communicate with staff regarding malicious emails.
- Support audit activities, vulnerability scans, and penetration tests.
- Respond to malware alerts and perform endpoint scans following SOPs.
- Collaborate with cloud security engineers to review findings from CSPM tools (e.g., Cloudscape).
- Track remediation status, validate suppression expiry, and escalate unresolved issues.
- Assess security recommendations using Company's GenAI tool to distinguish real threats from false positives.
Technical Support & Governance
- Provide vulnerability monitoring and recommend mitigation actions.
- Advise on security measures for new projects and functionalities.
- Monitor governance compliance tools and update suppression approvals.
- Prioritize alerts based on risk-based assessments.
- Respond to auditors requests for information (RFI) on security monitoring.
Reporting & Training
- Prepare monthly reports summarizing task progress and outstanding issues.
- Coordinate and deliver monthly IT security awareness training and briefings.
Job Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
- Minimum of one internationally recognized security certification (e.g., CISSP, CISM, CRISC, CISA).
- At least 2 years of experience in cloud cybersecurity, including:
- Security assessment and vulnerability management in cloud and on-prem environments (especially GCC).
- Familiarity with security platforms such as:
- Azure Log Analytics, AWS CloudWatch, AWS Security Hub CSPM, Microsoft Defender for Cloud.
- Strong analytical and problem-solving skills.
- Excellent communication skills (written and spoken English).
- Ability to work collaboratively within a team to ensure comprehensive security coverage.
- Strong organizational skills to manage multiple tasks and priorities effectively.
Working Hours: Monday to Friday, 8:30 AM 6:00 PM
