IT Security Officer (ITSO) -

Key Responsibilities

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation as required by the organisation.

• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.

• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.

• Monitor and analyse security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.

• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with the the organisation procedures.

• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorised by the organisation.

• Coordinate with the clint teams, GovTech, managed service providers, vendors, and external security partners on operational and incident matters.

• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.

• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports, and ad hoc reports requested by the organisation.

• Track licences, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.

• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.

• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.

• Assist with forensic acquisition and analysis activities when required and authorised, while maintaining chain of custody and secure evidence handling.

• Perform other reasonable cybersecurity duties necessary to protect the organisation information systems and infrastructure.

Experience and Qualifications

• Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.
• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.
• Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.
• Experience coordinating with external service providers, security organisations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills

• CyberArk Privileged Access Management.

• Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log analysis.

• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.

• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.

• Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.

• Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign management.

• Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are preferred.