Job Description

Key Responsibilities

• Monitor, detect, and respond to security incidents and vulnerabilities.
• Implement, configure, and maintain security tools such as firewalls, IDS/IPS, antivirus, and SIEM systems.
• Conduct risk assessments, audits, and security reviews across systems, networks, and applications.
• Develop and enforce information security policies, procedures, and best practices.
• Collaborate with IT and business teams to ensure secure deployment of systems and applications.
• Perform vulnerability assessments and recommend mitigation strategies.
• Participate in incident response and forensic investigations when security breaches occur.
• Stay updated with emerging threats, vulnerabilities, and cybersecurity trends.
• Provide security awareness training to employees and stakeholders.

Education

• Advanced certifications or training in cybersecurity are preferred.

Skills and Experience

• 5 years of experience in information security, network security, or cybersecurity operations.
• Knowledge of security frameworks and standards: ISO 27001, NIST CSF, CIS Controls, NCA ECC.
• Familiarity with network protocols, operating systems, and application security principles.
• Experience with security tools such as firewalls, IDS/IPS, SIEM, vulnerability scanners.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively with cross-functional teams.

Professional Certifications (Preferred)

• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager
• CEH – Certified Ethical Hacker
• CompTIA Security+
• GIAC Security Essentials (GSEC)