IT Security Officer

IT Security Officer is responsible for implementing, monitoring, and maintaining the organization's IT security controls to protect information systems, networks, and sensitive data from security threats. This role ensures compliance with internal security policies, supports risk assessments and incident response activities, and promotes security awareness across the organization.

Key Responsibilities

• Monitor IT systems, networks, and security tools to identify potential security threats, vulnerabilities, and suspicious activities.
• Implement and maintain IT security policies, procedures, and controls in accordance with organizational standards and applicable regulations.
• Conduct regular vulnerability assessments, security reviews, and risk evaluations to identify and mitigate potential security risks.
• Investigate, document, and respond to information security incidents, including unauthorized access, malware, phishing, and data breaches.
• Manage user access controls, authentication mechanisms, and access rights to ensure appropriate protection of company information.
• Support the implementation and monitoring of endpoint protection, firewalls, antivirus solutions, intrusion detection systems, and other security technologies.
• Perform periodic security audits and compliance checks to ensure adherence to IT security policies and industry best practices.
• Collaborate with IT infrastructure, application development, and other business teams to address security issues and implement preventive measures.
• Maintain IT security documentation, incident reports, risk registers, and audit evidence.
• Conduct security awareness programs and provide guidance to employees on cybersecurity best practices.
• Support business continuity, disaster recovery, and data protection initiatives to minimize the impact of security incidents.

JOB REQUIREMENTS

a. Education & Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 3 years of hands-on technical experience in Information Security, Cloud Security, Threat Intelligence, or Security Engineering.
• Proven experience securing hybrid infrastructure (Cloud & On-Premise) and implementing AppSec controls within modern CI/CD pipelines.

b. Hard Skills & Technical Knowledge

Cloud & Infrastructure Security:

• Hands-on security administration across AWS, GCP, Google Workspace (GWS)
• Hands-on experience with SIEM, XDR, EDR, and log analysis tools to detect advanced persistent threats (APTs) and anomalous behavior.
• Experience monitoring and mitigating digital risks with cyber threat intelligence tools
• Solid understanding of the OWASP Top 10 and secure software development lifecycle (SSDLC) principles.
• Ability to perform VAPT (Vulnerability Assesment & Penetration Test)
• Ability to conduct code reviews and guide software developers on remediating code vulnerabilities.