IT Security Officer

Key Responsibilities:

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation as required.
• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.
• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.
• Monitor and analyze security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.
• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with established procedures.
• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorized.
• Coordinate with internal teams, government technology agencies, managed service providers, vendors, and external security partners on operational and incident matters.
• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.
• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports, and ad hoc reports as requested.
• Track licenses, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.
• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.
• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.
• Assist with forensic acquisition and analysis activities when required and authorized, while maintaining chain of custody and secure evidence handling.
• Perform other reasonable cybersecurity duties necessary to protect information systems and infrastructure.

Experience and Qualifications:

• Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
• Relevant experience aligned to the proposed skill level: Associate Consultant, 4 years or less
• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.
• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.
• Ability to work independently, priorities operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.
• Experience coordinating with external service providers, security organizations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills:

• CyberArk Privileged Access Management.
• Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log analysis.
• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.
• Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.
• Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign management.
• Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are preferred.