IT Security Officer - #1715

Position Overview

The IT Security Officer is responsible for supporting NParks' day-to-day cybersecurity operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and cloud environments. The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security risks are identified, tracked, and remediated in a timely manner.

The incumbent will play an operational role in maintaining the organization's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infra processes and controls.

Key Responsibilities

1. Vulnerability Management

• Coordinate vulnerability management activities across on-premises infrastructure, servers, endpoints, applications, and Azure cloud environments.

• Utilize security tools such as Vulnerability Management Systems (VMS), TenableOne, Cloudscape, and related platforms to identify, assess, and monitor security vulnerabilities.

• Conduct regular reviews of vulnerability assessment results and patch compliance reports to identify remediation priorities.

• Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.

• Monitor patching progress and ensure vulnerabilities are remediated within defined timelines and compliance requirements.

• Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.

• Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.

• Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.

• Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.

• Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.

1. Security Incident Response Support

• Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team, and security service providers.

• Coordinate incident investigations and facilitate communications among relevant technical and business stakeholders.

• Assist in the identification, escalation, containment, recovery, and closure of cybersecurity incidents.

• Maintain accurate incident records, logs, and supporting documentation.

• Follow up on remediation activities arising from security incidents and ensure completion within agreed timelines.

• Participate in incident review sessions and support the implementation of lessons learned and process improvements.

• Monitor incident trends and recommend operational improvements to enhance security effectiveness.

• Ensure incident management processes are executed in accordance with established security procedures and governance requirements.

1. DDoS and Web Application Firewall (WAF) Operations

• Support the operation and administration of DDoS mitigation and Web Application Firewall (WAF) services protecting NParks' Internet-facing applications.

• Coordinate with service providers and internal stakeholders to ensure the effectiveness of deployed security controls.

• Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.

• Facilitate WAF policy reviews, rule updates, and change requests in accordance with operational requirements.

• Support investigations involving web application attacks, suspicious traffic, and DDoS-related events.

• Track service issues and follow up with vendors to ensure timely resolution.

• Assist in service reviews and operational assessments of DDoS and WAF solutions.

1. Security and Infra Operations Coordination

• Coordinate cybersecurity and infra operational activities across application teams, infrastructure teams, Onsite FM teams, GCC FM teams, and external security vendors.

• Maintain security risk, remediation, and compliance tracking registers.

• Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.

• Support security governance activities through effective communication and collaboration with stakeholders.

• Escalate operational issues, delays, and security risks where required.

• Ensure cybersecurity and infra operational processes are executed consistently and effectively.

1. Reporting and Compliance Monitoring

• Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.

• Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.

• Monitor compliance against prescribed security requirements, policies, and standards.

• Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.

• Support management review meetings by providing timely and accurate cybersecurity status updates.

• Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.

Requirements

Qualifications

• Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.

Experience

• Minimum 2–5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related IT security functions.

• Experience working with vulnerability management tools such as Tenable, or equivalent solutions.

• Exposure to Microsoft Azure security and cloud environments is advantageous.

• Experience coordinating cybersecurity incidents and remediation activities.

• Familiarity with DDoS protection and WAF technologies is preferred.

• Experience supporting compliance and governance requirements within enterprise or public-sector environments is advantageous.

Technical Knowledge

• Understanding of cybersecurity, infra operations and security monitoring practices.

• Knowledge of vulnerability management and patch management processes.

• Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.

• Basic understanding of network, server, application, and cloud security concepts.

• Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.

Soft Skills

• Strong coordination and stakeholder management skills.

• Good analytical and problem-solving capabilities.

• Effective verbal and written communication skills.

• Ability to work independently and collaboratively within a team environment.

• Strong organizational skills with attention to detail.

• Ability to manage multiple tasks and priorities in a dynamic operational environment.

Preferred Certifications

• Azure Cloud Certifications

• CompTIA Security+

• Microsoft Security Certifications

• CEH (Certified Ethical Hacker)

• ISC2 CC (Certified in Cybersecurity)

• CISSP or CISM (advantageous but not mandatory)