IT Security Officer BCA

Job description summary: BCA is looking for an IT Security Officer (Consultant) to strengthen our security operations and governance. In this role, you will oversee security vendors, manage testing cycles, and provide expert consultancy — ensuring that government systems remain resilient against evolving cyber threats. What the officer will be working on: Manage securityvendors and deliverables. Manage periodic securitytesting. Assess mitigation/remediation for adequacy and effectiveness. Manage timely and effective mitigation/remediation. Review securityreports. Review securitypolicies, standards, procedures and guidelines. Provide cybersecurityconsultancy. Respond to securityalerts/advisories. Handling incidents. Conduct securityawareness training. Broadcast email securityadvisories. Job requirement: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Minimum of 4-7 years of experience in cybersecurityanalyst or similar role. Strong understanding of network protocols, operating systems (Windows, Linux), and cloud securityconcepts (AWS, Azure, GCP). Proficiency with securitytools such as vulnerability scanners, penetration testing tools, and SIEM platforms. Experience with scripting languages (e.g., Python, PowerShell) for automation. Familiarity with cybersecurityframeworks and standards (e.g., NIST, ISO 27001). Excellent analytical and problem-solving skills with a strong attention to detail. Ability to work independently and as part of a team in a fast-paced environment. Strong written and verbal communication skills, with the ability to articulate technical information to non-technical audiences. Proven ability to manage multiple tasks and prioritize effectively. Require CISSP and/or CISM certification. What are we looking for: Enthusiasm for learning and development of skills in cybersecurity. Strong analytical capability. Understanding of the vulnerabilities listed in the Open Web Application Security Project (OWASP) Top 10. Understanding of incident management and handling. Experience in software development or security operations is preferred. The following certifications are advantageous but not mandatory: GIAC Certified Incident Handler (GCIH) CompTIA Security+ CompTIA CySA+ EC-Council Certified Security Analyst (ECSA) EC-Council Certified Ethical Hacker (CEH) (ISC)2 Systems SecurityCertified Practitioner (SSCP) Offensive Security Certified Professional (OSCP)