IT Security (6-Months Agency Contract)

Job Responsibilities

• Develop, maintain, and enforce cybersecurity policies, standards, procedures, and security controls aligned with regulatory requirements, ISO 27001, NIST, CIS benchmarks, and industry best practices.
• Manage security operations by monitoring security events, analysing threats, investigating incidents, coordinating response activities, and driving remediation to closure.
• Conduct cybersecurity risk assessments, vulnerability management, penetration testing, compliance reviews, audits, and third-party security assessments.
• Provide security advisory and technical guidance to infrastructure, applications, cloud, and project teams to ensure security-by-design principles are embedded throughout the system lifecycle.
• Manage and optimize security technologies including SIEM, EDR/XDR, WAF, PAM, vulnerability management platforms, DDoS protection solutions, and cloud security tools.
• Oversee privileged access, identity security, endpoint protection, secure configuration management, system hardening, and access control reviews across on-premises and cloud environments.
• Collaborate with internal stakeholders, service providers, and vendors to implement cybersecurity initiatives, manage security services, and improve overall security posture.
• Drive security awareness, maintain cybersecurity documentation, and prepare management reports on incidents, vulnerabilities, compliance status, risks, and security performance metrics.

Job Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Minimum 5 years of experience in cybersecurity, security operations, governance, risk and compliance (GRC), IT security controls, or infrastructure security roles.
• Hands-on experience managing security operations, incident response, vulnerability management, access controls, and enterprise security technologies.
• Strong knowledge of cybersecurity frameworks and standards including ISO 27001, NIST Cybersecurity Framework, CIS Benchmarks, and regulatory compliance requirements.
• Experience with security tools such as SIEM, EDR/XDR, WAF, PAM, vulnerability assessment platforms, and security monitoring solutions.
• Good understanding of network security, cloud security, identity and access management, endpoint protection, security logging, threat detection, and system hardening.
• Professional certifications such as CISSP, CISM, CISA, CCSP, GIAC, Microsoft Security, Azure Security, or AWS Security certifications are preferred.
• Strong analytical, problem-solving, stakeholder management, communication, and documentation skills, with the ability to work independently in a fast-paced environment.