IT Security Officer
Posted Updated 4
views
- Develop and maintain IT Audit and Risk assessments for departments, under the guidance of our Cybersecurity/GRC Manager
- Review impacts of changes pre/post-implementation to our system to maintain or improve our security posture
- Evaluate and spread the word on controls and policies to drive compliance, and provide feedback to various security/compliance committees
- Develop material and coordinate with vendors on information security training and awareness
- Disseminate security communications across the organization as required
- Collect evidence for purposes of audit and compliance
- Assist with assessing the security posture of third-party vendors and suppliers
- Guard Sleek from internal/external threats. Raise and respond to security incidents reported, and communicate with committees to initiate DR/BCP if necessary
- Report and track incidents raised in SIEM and other sources
- Aid the proper classification and rating of risk items
- Initiate regular improvement drives for security across departments
- Degree in Computer Science, Information Security, or Information Systems;
- At least 5 years of experience in IT security space
- Thorough grasp of Python programming basics and optimal methodologies
- Good understanding of TRM or equivalent regulatory framework
- Familiar with industry standards related to IT Controls – ISO 27001, NIST, OWASP, Cloud Security
- Experience with Splunk SIEM is necessary, CASB/XDR tools are a bonus
- Strong in analytical thinking with attention to detail
- Good communication, written, and interpersonal skills
- Security-related certifications are a plus: CISSP, CISM, CRISC, CGEIT, and/or CISA