Key Responsibilities

Security Operations & Analysis

• Analyse and interpret reports on security services including web filtering, SOC outputs, incidents, vulnerabilities, patching status, and penetration test results.
• Support daily BAU security operations: incident handling, security requests, and phishing/spam analysis.
• Monitor threat intelligence, evaluate emerging risks, and recommend mitigation measures.
• Ensure all BAU tasks are completed accurately and without interruption.

Governance, Risk & Compliance

• Contribute to cybersecurity maturity assessments (NIST CSF, Essential Eight, or similar frameworks).
• Prepare and support documentation for internal and external audits.
• Assist with preparation of quarterly Key Risk Indicator (KRI) reports.
• Review internal controls documentation for clarity, consistency, and compliance with standards and policies.
• Prepare draft assessments for the Data Location Framework and IT security reviews.
• Review, update, and improve security policies, processes, and procedures.

Cloud & Technology Security

• Advise on Microsoft 365 and Azure security best practices, configurations, and hardening measures.
• Conduct market analysis of cybersecurity tools, services, and concepts to support strategic decisions.
• Develop/enhance security requirements, test plans, and validation materials.

Project Coordination & Stakeholder Management

• Coordinate deliverables with internal teams and third-party security providers.
• Lead BAU security initiatives, ensuring timely, high-quality outcomes.
• Perform quality assurance (QA) and challenge documentation quality before submission.
• Support business continuity, disaster recovery, and cybersecurity exercises.
• Manage ad hoc administrative and coordination tasks including meetings, agendas, and minutes.

Required Skills & Experience

• 7–10 years of experience in cybersecurity engineering, security operations, or similar roles.
• Strong knowledge of cybersecurity frameworks (NIST CSF, Essential Eight, ISO 27001, etc.).
• Experience in SOC processes, vulnerability management, incident response, and threat analysis.
• Hands-on expertise with Microsoft 365 and Azure security controls.
• Ability to analyse technical reports and develop clear, structured documentation.
• Strong stakeholder management and communication skills.
• Experience supporting audits, risk assessments, and compliance initiatives.
• Proven ability to work independently in a fast-paced, on-site environment.

Technologies & Tools (Preferred)

• Microsoft 365 & Azure Security Suite
• SIEM/SOC tools (Splunk, Sentinel, etc.)
• Vulnerability management platforms (e.g., Qualys, Tenable)
• Email security & anti-phishing solutions
• Threat intelligence platforms
• Security testing and assessment tools
• IT governance and risk management tools (GRC)