IT Security Officer

Overview

We are seeking an experienced IT Security Officer to enhance cybersecurity governance, assurance, and security management across enterprise platforms. This position involves coordinating security reviews, managing remediation tracking, and supporting policy upkeep to ensure robust protection of organizational information assets.

Primary Duties

• Maintain and govern security architecture artifacts, document decisions, and create advisory materials regarding security frameworks.
• Coordinate vulnerability assessment and penetration testing engagements, monitor remediation efforts, and oversee retesting and closure activities.
• Facilitate cybersecurity risk assessments by maintaining risk registers and tracking treatment actions, including supporting workflows for risk acceptance and exceptions.
• Manage system hardening compliance by conducting checks, identifying gaps, and generating periodic compliance reports.
• Oversee cloud security posture by monitoring findings, identifying misconfigurations, and collaborating with system/cloud owners for remediation.
• Handle software security clearance processes including approval monitoring and documentation gathering.
• Track firewall rule change requests and network security deviations, maintain deviation registers, and coordinate review cycles.
• Contribute to the evolution of cybersecurity policies, standards, guidelines, and procedures while maintaining document repositories and review schedules.
• Prepare security metrics and reports, consolidate updates, and maintain dashboards relating to vulnerabilities, risks, deviations, compliance, and audits.
• Support security compliance and audit readiness efforts through evidence collection and meticulous recordkeeping.
• Manage sensitive information in line with organizational security and confidentiality protocols.

Required Qualifications and Skills

• In-depth knowledge of enterprise cybersecurity principles including vulnerability management, risk assessments, system hardening, firewall controls, cloud security, and governance.
• Proven experience coordinating security assessments and remediation actions involving diverse stakeholders such as system owners, infrastructure teams, and vendors.
• Capability to analyze and interpret outputs from vulnerability assessments, risk assessments, network architectures, firewall requests, and compliance documentation.
• Familiarity with cybersecurity frameworks, standard operating procedures, and governance mechanisms.
• Strong analytical, documentation, coordination, and follow-up abilities.
• Proficiency in creating structured artifacts such as trackers, registers, dashboards, and formal management communications.

Desirable Skills

• Knowledge of Cloud Security Posture Management (CSPM) tools and cloud computing security concepts (AWS, Azure, or equivalents).
• Experience working with CVE/CVSS data and vulnerability management or penetration testing tools.
• Understanding of network security architecture including security zones, segmentation, and firewall governance.
• Background in audit support, Governance Risk Compliance (GRC) tasks, and compliance evidence preparation.
• Relevant industry certifications such as Security+, ISC2 CC, CISSP, CISM, CRISC, ISO 27001, or cloud security credentials.