IT Security Officer

Job Responsibilities:

System Security & Compliance

• Conduct security reviews and system hardening checks.
• Perform risk assessments based on deviations from hardening requirements (e.g., CIS Benchmarks).
• Develop and maintain Company's hardening baselines using industry benchmarks.
• Create, review, and update Standard Operating Procedures (SOPs).
• Plan and schedule annual reviews of security hardening documents.
• Perform compliance reviews and ensure timely remediation of findings.

Security Monitoring & Incident Response

• Monitor phishing alerts and communicate with staff regarding malicious emails.
• Support audit activities, vulnerability scans, and penetration tests.
• Respond to malware alerts and perform endpoint scans following SOPs.
• Collaborate with cloud security engineers to review findings from CSPM tools (e.g., Cloudscape).
• Track remediation status, validate suppression expiry, and escalate unresolved issues.
• Assess security recommendations using Company's GenAI tool to distinguish real threats from false positives.

Technical Support & Governance

• Provide vulnerability monitoring and recommend mitigation actions.
• Advise on security measures for new projects and functionalities.
• Monitor governance compliance tools and update suppression approvals.
• Prioritize alerts based on risk-based assessments.
• Respond to auditors’ requests for information (RFI) on security monitoring.

Reporting & Training

• Prepare monthly reports summarizing task progress and outstanding issues.
• Coordinate and deliver monthly IT security awareness training and briefings.

Job Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Minimum of one internationally recognized security certification (e.g., CISSP, CISM, CRISC, CISA).
• At least 2 years of experience in cloud cybersecurity, including:
• Security assessment and vulnerability management in cloud and on-prem environments (especially GCC).
• Familiarity with security platforms such as:
• Azure Log Analytics, AWS CloudWatch, AWS Security Hub CSPM, Microsoft Defender for Cloud.
• Strong analytical and problem-solving skills.
• Excellent communication skills (written and spoken English).
• Ability to work collaboratively within a team to ensure comprehensive security coverage.
• Strong organizational skills to manage multiple tasks and priorities effectively.

Working Hours: Monday to Friday, 8:30 AM – 6:00 PM