Security Officer (IT Infra and Security Operations) (Ref 24964)

Responsibilities • Coordinate vulnerability management activities across on-premises infrastructure, servers, endpoints, applications, and Azure cloud environments. • Utilise security tools such as Vulnerability Management Systems (VMS), TenableOne, Cloudscape, and related platforms to identify, assess, and monitor security vulnerabilities. • Conduct regular reviews of vulnerability assessment results and patch compliance reports to identify remediation priorities. • Monitor patching progress and ensure vulnerabilities are remediated within defined timelines and compliance requirements. • Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation. • Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards. • Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team, and security service providers. • Follow up on remediation activities arising from security incidents and ensure completion within agreed timelines. • Coordinate with service providers and internal stakeholders to ensure the effectiveness of deployed security controls. • Facilitate WAF policy reviews, rule updates, and change requests in accordance with operational requirements. • Support investigations involving web application attacks, suspicious traffic, and DDoS-related events. • Assist in service reviews and operational assessments of DDoS and WAF solutions. • Coordinate cybersecurity and infra operational activities across application teams, infrastructure teams, Onsite FM teams, and external security vendors. • Maintain security risk, remediation, and compliance tracking registers. • Support security governance activities through effective communication and collaboration with stakeholders. • Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data. • Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress. • Monitor compliance against prescribed security requirements, policies, and standards. • Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance. • Support management review meetings by providing timely and accurate cybersecurity status updates. Requirements • Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field. • 2–5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related IT security functions. • Experience working with vulnerability management tools such as Tenable, or equivalent solutions, coordinating cybersecurity incidents and remediation activities. • Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent. • Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis. • Familiarity with DDoS protection and WAF technologies is preferred. • Exposure to Microsoft Azure security and cloud environments is advantageous. • Experience supporting compliance and governance requirements is advantageous. • Preferred Certifications: CompTIA Security+ / Microsoft Security Certifications / CEH (Certified Ethical Hacker) Shortlisted candidates will be offered a 6 Months agency contract employment. Licence no: 12C6060