IT Security Officer

Experience Required: 4–7 years

About the Role

DBiz is seeking an IT Security Officer (Cybersecurity) to strengthen cybersecurity operations and governance for government systems. In this role, you will work across security monitoring, vulnerability management, incident response, and security assurance—partnering closely with internal stakeholders and external security vendors. You will ensure security testing is executed effectively, findings are translated into actionable remediation, and security controls remain robust against evolving threats.

Key Responsibilities

• Own day-to-day security operations and governance, working with internal teams and managed security service providers (MSSPs) to deliver agreed outcomes
• Manage security vendors and deliverables (scope, timelines, reporting quality, follow-ups, and service performance)
• Plan and run periodic security testing cycles (e.g., vulnerability scans, penetration tests, configuration reviews), ensuring coverage and timely completion
• Review security findings and validate mitigation/remediation plans for adequacy, risk reduction, and operational feasibility
• Track and drive timely remediation closure, coordinating with infrastructure, application, and project teams; escalate risks where required
• Review and interpret security reports (e.g., VA/PT results, monitoring reports, advisories) and translate them into clear actions and risk narratives
• Maintain and improve security policies, standards, procedures, and guidelines, aligned to recognised frameworks (e.g., NIST, ISO 27001) and government requirements
• Provide cybersecurity consultancy to project teams—security-by-design guidance, risk assessments, and control recommendations
• Monitor and respond to security alerts/advisories, including triage, investigation support, and containment actions where needed
• Support incident response activities: initial assessment, coordination, evidence handling support, post-incident review, and lessons learned
• Drive security awareness: conduct briefings/training, publish user advisories, and run targeted campaigns (e.g., phishing, email security hygiene)

Screening Requirements / Skills (Must-Have)

• Bachelor's degree in Computer Science, IT, Cybersecurity, or related discipline
• 4–7 years of experience in cybersecurity operations, security assurance, or a similar role
• Strong fundamentals in networking and operating systems (Windows/Linux) and working knowledge of cloud security concepts (AWS/Azure/GCP)
• Hands-on experience with security tooling such as SIEM, vulnerability scanners, and/or penetration testing tools
• Proven ability to manage security testing and remediation end-to-end (from findings to closure)
• Familiarity with security frameworks/standards such as NIST and/or ISO 27001
• Ability to communicate security risks and recommendations clearly to both technical and non-technical stakeholders
• CISSP and/or CISM certification (required)

Nice-to-Have / Advantage

• Understanding of OWASP Top 10 and common web application security issues
• Experience in incident handling and operational playbooks/runbooks
• Scripting/automation skills (e.g., Python, PowerShell) to streamline security operations
• Exposure to software development, DevSecOps, or security operations in complex environments
• Additional certifications (advantage): GCIH, Security+, CySA+, ECSA, CEH, SSCP, OSCP