IT Security Officer

Key Responsibilities:

Security Architecture

• Assist in maintaining security architecture diagrams, records, and approved design documentation.
• Track security architecture review requests and coordinate inputs from project teams and relevant stakeholders.
• Maintain records of architecture decisions, recommendations, and approved designs.
• Support preparation of security advisory materials and architecture review documentation.

Vulnerability Assessment & Penetration Testing

• Coordinate and schedule VAPT engagements with system owners, vendors, and security testers.
• Maintain VAPT records and follow up on remediation of identified vulnerabilities.
• Coordinate re-testing activities and update finding closure status.
• Assist in preparing VAPT reports, summaries, and presentation materials.

Risk Assessment

• Coordinate cybersecurity risk assessment exercises with system owners and stakeholders.
• Maintain cybersecurity risk records and track risk treatment and remediation actions.
• Support preparation of risk reports and management review materials.
• Facilitate risk acceptance, exception, and approval processes in accordance with organizational requirements.

Hardening Compliance

• Coordinate security hardening compliance assessments with system and infrastructure teams.
• Track hardening gaps and follow up on remediation progress.
• Maintain hardening compliance records, checklists, and trackers.
• Support preparation of periodic hardening compliance reports.

Cloud Security Posture Management

• Monitor and triage findings generated by Cloud Security Posture Management tools.
• Track cloud security misconfigurations and follow up on remediation with system and cloud owners.
• Maintain CSPM findings and remediation status records.
• Prepare periodic cloud security posture reports and summaries.

Software Clearance

• Receive, log, and track software security clearance requests.
• Coordinate with requestors and vendors to obtain required technical and security documentation.
• Maintain software clearance records and approval status.
• Support preparation of software security evaluation summaries and monitor expiring clearances.

Firewall & Network Deviation Management

• Receive, track, and maintain firewall rule change and network security deviation requests.
• Follow up with requestors and network teams on outstanding actions and expiring deviations.
• Maintain deviation records and prepare review summaries for approval.
• Coordinate periodic firewall rule and network deviation reviews with relevant teams.

Policy, Standards & Governance / Cyber Specifications

• Assist in drafting, reviewing, and updating cybersecurity policies, standards, guidelines, and procedures.
• Maintain the cybersecurity policy and standards documentation repository.
• Track document review cycles, approvals, and expiry dates.
• Support preparation and review of cybersecurity specifications for projects and procurement activities.

Security Metrics & Reporting

• Collate and consolidate cybersecurity data and status updates from relevant teams and systems.
• Maintain cybersecurity dashboards covering vulnerabilities, risks, deviations, compliance, and audit items.
• Prepare routine security metrics and management reports.
• Follow up with responsible parties on outstanding cybersecurity actions and remediation items.

Security & Compliance

• Ensure activities are performed in accordance with organizational cybersecurity policies, applicable regulatory requirements, and relevant cybersecurity standards.
• Support cybersecurity assessments, internal and external audits, and evidence collection activities.
• Maintain accurate and up-to-date cybersecurity records, reports, registers, and supporting documentation.
• Protect sensitive and security-classified information in accordance with organizational requirements.

Technical Requirements

Mandatory Technical Skills

• Good understanding of enterprise cybersecurity concepts, including vulnerability management, security risk assessment, system hardening, firewall controls, cloud security, and security governance.
• Experience coordinating cybersecurity assessments, remediation activities, and security review processes involving multiple technical and business stakeholders.
• Ability to review and understand vulnerability assessment findings, security risk assessments, security architecture diagrams, firewall rules, and security compliance reports.
• Familiarity with security frameworks, policies, standards, and cybersecurity governance processes.
• Strong analytical, documentation, stakeholder coordination, and follow-up skills.

Good-to-Have

• Familiarity with CSPM platforms and cloud security concepts across AWS, Azure, or equivalent cloud environments.
• Experience with vulnerability management or VAPT tools and interpreting CVE/CVSS information.
• Understanding of enterprise network architecture, firewall rules, security zones, and network segmentation.
• Experience supporting cybersecurity audits, governance, risk, and compliance activities.

Certifications

• CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or equivalent foundational cybersecurity certification is highly preferred.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent will be advantageous.
• Certified in Risk and Information Systems Control (CRISC), ISO 27001-related certification, or equivalent risk/governance certification will be advantageous.
• Relevant cloud security certification such as Microsoft Azure Security, AWS Security, or equivalent will be advantageous.