IT Security Operations Specialist (Governance, Risk and Compliance)

Responsibilities

Security Operations & System Management

• Perform regular operating system patching across all environments
• Manage enterprise password policies and credential renewal processes
• Conduct vulnerability assessments and coordinate remediation activities
• Monitor and maintain endpoint protection and antivirus solutions
• Maintain accurate server inventory and asset records within the TechLens platform

Certificate & Lifecycle Management

• Manage the end-to-end lifecycle of SSL certificates, including timely renewals
• Track and report system End-of-Life (EOL) and End-of-Support (EOS) statuses
• Coordinate system upgrades or replacements for EOL/EOS components

Access Control & Security Monitoring

• Perform periodic User Access Reviews (UAR)
• Monitor, investigate, and respond to failed login attempts and access anomalies
• Manage privileged access rights and permissions
• Review and analyze security logs to identify potential threats or incidents

Risk & Compliance

• Conduct regular IT risk assessments
• Address and remediate security findings from Cloudscape assessments
• Prepare security metrics, reports, and documentation for management and audit reviews

Requirements

• 8 years of experience in IT security operations and governance, risk, compliance related roles.
• Relevant security certifications such as CompTIA Security+ or CISSP
• Hands-on experience with security monitoring and logging tools
• Familiarity with security and compliance frameworks such as ISO 27001 and NIST
• Working knowledge of AWS services including IAM, CloudWatch, and related security controls
• Bachelor’s degree in Information Technology, Computer Science, or a related discipline
• Strong understanding of IT security principles, tools, and industry best practices
• AWS certifications will be a plus
• Strong analytical, troubleshooting, and problem-solving skills
• Excellent documentation and communication abilities
• Ability to operate effectively in a fast-paced, enterprise environment