IT Security Officer
- Posted 11 days ago
- Be among the first 10 applicants
Job Description
We are looking for an IT Security Officer (Consultant) to strengthen our security operations and governance. In this role, you will oversee security vendors, manage testing cycles, and provide expert consultancy — ensuring that government systems remain resilient against evolving cyber threats.
Key Responsibilities
- Manage security vendors and deliverables.
- Manage periodic security testing cycles.
- Assess mitigation and remediation plans for adequacy and effectiveness.
- Drive timely and effective mitigation and remediation of identified risks.
- Review security reports, alerts, and advisories.
- Review security policies, standards, procedures, and guidelines.
- Provide cybersecurity consultancy to internal teams and key stakeholders.
- Respond to security alerts, advisories, and handle incidents.
- Conduct security awareness training across the organization.
- Broadcast email security advisories to end users.
Job Requirements
- Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Experience: Minimum of 4 to 7 years of experience in a cybersecurity analyst, security consultant, or similar role.
- Certifications: Mandatory CISSP and/or CISM certification.
- Technical Knowledge: Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
- Security Tooling: Proficiency with security tools such as vulnerability scanners, penetration testing tools, and SIEM platforms.
- Automation: Experience with scripting languages (e.g., Python, PowerShell) for task automation.
- Frameworks: Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
- Soft Skills: Excellent analytical, problem-solving, and time-management skills, with the ability to communicate technical information clearly to non-technical audiences.
Preferred Competencies
- Strong understanding of vulnerabilities listed in the Open Web Application Security Project (OWASP Top 10).
- Hands-on understanding of incident management and threat handling.
- Prior experience in software development or security operations (SecOps) is preferred.
- Advantageous certifications: GIAC (GCIH), CompTIA Security+/CySA+, EC-Council (CEH/ECSA), SSCP, or OSCP.
More Info
Key Skills
vulnerability scanners
penetration testing tools
SIEM platforms
cloud security concepts
threat handling
Windows
About Company
Skills:
security assurance , DAST, Cloud security, Penetration Testing, Google Cloud, Identity And Access Management, Incident Response, Microsoft Azure, Vulnerability assessment, AWS, Cyber resilience, Security Architecture, Cybersecurity governance, SAST, Disaster Recovery, Zero Trust, Risk management
Skills:
cloud security, network security, Vulnerability Management, Iso 27001, Vapt, Azure, AWS, Documentation, Risk Assessment, remediation activities, Policies, security governance, CVSS, Standards, CSPM tools, CVE, system hardening, Security Assessments, audits, GRC activities, firewall controls
Skills:
security tools , PowerShell, Operating Systems, Windows, Network Protocols, Iso 27001, Gcp, Linux, Scripting Languages, Azure, Python, AWS, vulnerability scanners, penetration testing tools, SIEM platforms, cybersecurity frameworks, nist, cloud security concepts
Skills:
Government Commercial Cloud (GCC), OWASP Application Security Verification Standard (ASVS), Github, Soap, Sonarqube, SSL, REST, DevSecOps, Ansible, Owasp Top 10, Agile Development, Gitlab, Tls, AWS, Security awareness training, Fortify-on-Demand, Cybersecurity risk assessments, CI/CD, Threat modelling, SAST code scanning tools, Cybersecurity incident response and management
Skills:
Government Commercial Cloud (GCC), Iso 27001, Siem, PAM, cloud security controls, NIST CSF, CIS Controls, vulnerability management tools, IM8, EDR, audit remediation, security risk assessments