Job Summary:
The IT Security Specialist will be responsible for the development, implementation, and ongoing review of a comprehensive security framework. This includes creating and maintaining security policies, performing audits, conducting risk assessments, and managing customer incident response plans. The role involves being the main point of contact for security-related matters and collaborating with customers to ensure the security of their ICT systems. The ideal candidate will have a strong background in IT security, including experience with networks, servers, databases, and security auditing.
Key Responsibilities:
• Review and develop security frameworks, information security policies, and related processes, ensuring they are up to date and aligned with best practices.
• Conduct security reviews and audits, including log analysis and security assessments of customer ICT systems.
• Perform security risk management exercises, identifying vulnerabilities and mitigating risks.
• Organize and conduct table-top security exercises to simulate potential security incidents.
• Conduct vulnerability assessments and coordinate penetration testing activities.
• Provide information security awareness training to project and internal teams.
• Develop and manage customer security incident response plans, leading incident resolution and response efforts.
• Serve as the primary point of contact and advisor for customers on ICT security-related matters.
• Project manage security initiatives during the implementation phase, ensuring timely and quality delivery.
Requirements:
• Minimum of 3 years of experience in IT security.
• Expertise in Networks, Servers (Windows and UNIX), and Database systems.
• Experience with IT security auditing and security assessments.
• Proficient in analysing logs from various sources and understanding protocols and traffic flows.
• Knowledge of security tools such as Active Directory, Endpoint Protection Solutions, Early Detection and Response Solutions, Database Activity Monitoring tools, and SIEM systems.
• Excellent communication and presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team-oriented approach with a strong focus on problem-solving.
• Strong organizational skills and the ability to work independently in a dynamic environment.
• Ability to multitask effectively between various projects and teams.
Certifications:
• CISSP certification is mandatory.
• Additional certifications like CISM, Security+, or certifications in security tools such as Imperva and Carbon Black are a plus