IT Security Officer (Associate Consultant)

Scope of Services

• Privileged Access Management, including CyberArk administration and operational support.

• Security monitoring platforms, including SIEM, database activity monitoring, network device log monitoring, and insider security monitoring.

• Data Loss Prevention, including Forcepoint administration, policy support, alert handling, and reporting.

• Web application and infrastructure security support, including Imperva WAF and related security technologies where assigned.

• Security team mailbox operations, including Vulnerability Watch, phishing reports, and other security notifications.

• Security-related virtual machines, Syslog-NG / log management services, Windows and Linux servers, and supporting cloud services in Microsoft Azure, Amazon Web Services, and Google Cloud Platform where applicable.

• Cybersecurity awareness communications, phishing simulation exercises, and staff awareness activities.

• Asset onboarding and inventory maintenance for central security monitoring tools, including servers, network devices, databases, cloud assets, and internet-facing services.

Key Responsibilities

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation.

• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.

• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.

• Monitor and analyse security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.

• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with company procedures.

• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorised by company.

• Coordinate with company and managed service providers, vendors, and external security partners on operational and incident matters.

• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.

• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports.

• Track licences, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.

• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.

• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.

• Assist with forensic acquisition and analysis activities when required and authorised, while maintaining chain of custody and secure evidence handling.

• Perform other reasonable cybersecurity duties necessary to protect company information systems and infrastructure.

Deliverables and Reporting

• Operational health-check records and issue logs at frequencies.

• Bi-weekly operational status report covering incidents, alerts, outstanding actions, platform health, vulnerabilities, and service risks.

• Monthly service report and timesheet.

• Updated asset inventories, access records, runbooks, standard operating procedures, configuration records, and handover documentation.

• Incident, vulnerability, phishing exercise, audit, and management reports as requested.

• Knowledge-transfer sessions and complete handover documentation before replacement or contract end.

Experience and Qualifications

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.

• Min 2-4 years of experience

• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.

• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.

• Ability to work independently, prioritise operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.

• Experience coordinating with external service providers, security organisations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills

• CyberArk Privileged Access Management.

• Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log analysis.

• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.

• Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.

• Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign management.

• Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are preferred.