IT Security Officer

Key Responsibilities: Security Architecture • Assist in maintaining security architecture diagrams, records, and approved design documentation. • Track security architecture review requests and coordinate inputs from project teams and relevant stakeholders. • Maintain records of architecture decisions, recommendations, and approved designs. • Support preparation of security advisory materials and architecture review documentation. Vulnerability Assessment & Penetration Testing • Coordinate and schedule VAPT engagements with system owners, vendors, and security testers. • Maintain VAPT records and follow up on remediation of identified vulnerabilities. • Coordinate re-testing activities and update finding closure status. • Assist in preparing VAPT reports, summaries, and presentation materials. Risk Assessment • Coordinate cybersecurity risk assessment exercises with system owners and stakeholders. • Maintain cybersecurity risk records and track risk treatment and remediation actions. • Support preparation of risk reports and management review materials. • Facilitate risk acceptance, exception, and approval processes in accordance with organizational requirements. Hardening Compliance • Coordinate security hardening compliance assessments with system and infrastructure teams. • Track hardening gaps and follow up on remediation progress. • Maintain hardening compliance records, checklists, and trackers. • Support preparation of periodic hardening compliance reports. Cloud Security Posture Management • Monitor and triage findings generated by Cloud Security Posture Management tools. • Track cloud security misconfigurations and follow up on remediation with system and cloud owners. • Maintain CSPM findings and remediation status records. • Prepare periodic cloud security posture reports and summaries. Software Clearance • Receive, log, and track software security clearance requests. • Coordinate with requestors and vendors to obtain required technical and security documentation. • Maintain software clearance records and approval status. • Support preparation of software security evaluation summaries and monitor expiring clearances. Firewall & Network Deviation Management • Receive, track, and maintain firewall rule change and network security deviation requests. • Follow up with requestors and network teams on outstanding actions and expiring deviations. • Maintain deviation records and prepare review summaries for approval. • Coordinate periodic firewall rule and network deviation reviews with relevant teams. Policy, Standards & Governance / Cyber Specifications • Assist in drafting, reviewing, and updating cybersecurity policies, standards, guidelines, and procedures. • Maintain the cybersecurity policy and standards documentation repository. • Track document review cycles, approvals, and expiry dates. • Support preparation and review of cybersecurity specifications for projects and procurement activities. Security Metrics & Reporting • Collate and consolidate cybersecurity data and status updates from relevant teams and systems. • Maintain cybersecurity dashboards covering vulnerabilities, risks, deviations, compliance, and audit items. • Prepare routine security metrics and management reports. • Follow up with responsible parties on outstanding cybersecurity actions and remediation items. Security & Compliance • Ensure activities are performed in accordance with organizational cybersecurity policies, applicable regulatory requirements, and relevant cybersecurity standards. • Support cybersecurity assessments, internal and external audits, and evidence collection activities. • Maintain accurate and up-to-date cybersecurity records, reports, registers, and supporting documentation. • Protect sensitive and security-classified information in accordance with organizational requirements. Technical Requirements Mandatory Technical Skills • Good understanding of enterprise cybersecurity concepts, including vulnerability management, security risk assessment, system hardening, firewall controls, cloud security, and security governance. • Experience coordinating cybersecurity assessments, remediation activities, and security review processes involving multiple technical and business stakeholders. • Ability to review and understand vulnerability assessment findings, security risk assessments, security architecture diagrams, firewall rules, and security compliance reports. • Familiarity with security frameworks, policies, standards, and cybersecurity governance processes. • Strong analytical, documentation, stakeholder coordination, and follow-up skills. Good-to-Have • Familiarity with CSPM platforms and cloud security concepts across AWS, Azure, or equivalent cloud environments. • Experience with vulnerability management or VAPT tools and interpreting CVE/CVSS information. • Understanding of enterprise network architecture, firewall rules, security zones, and network segmentation. • Experience supporting cybersecurity audits, governance, risk, and compliance activities. Certifications • CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or equivalent foundational cybersecurity certification is highly preferred. • Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent will be advantageous. • Certified in Risk and Information Systems Control (CRISC), ISO 27001-related certification, or equivalent risk/governance certification will be advantageous. • Relevant cloud security certification such as Microsoft Azure Security, AWS Security, or equivalent will be advantageous.