ITSO - Information Technology Security Officer

Job Description & Requirements

We are seeking an Information Technology Security Officer to support cybersecurity governance, risk, compliance and security management activities. The role involves coordinating security assessments, tracking remediation activities, maintaining cybersecurity registers and preparing security reports and dashboards.

Key Responsibilities

• Coordinate vulnerability assessment, penetration testing (VAPT) and remediation activities.
• Support cybersecurity risk assessments and maintain risk registers and treatment plans.
• Coordinate system hardening assessments and track compliance gaps.
• Monitor cloud security posture findings and follow up on remediation.
• Coordinate software security clearance and maintain approval records.
• Manage firewall rule changes and network security deviation requests.
• Support security architecture reviews, documentation and design approvals.
• Assist in maintaining cybersecurity policies, standards, procedures and specifications.
• Prepare cybersecurity metrics, dashboards, management reports and audit evidence.
• Coordinate with infrastructure, application, cloud, network, project teams, vendors and system owners.
• Support cybersecurity audits and ensure compliance with applicable security policies, regulatory requirements and standards.

Requirements

• Diploma/Degree in Information Technology, Computer Science, Cybersecurity or related discipline.
• Relevant experience in cybersecurity, information security, security governance, risk management or security compliance.
• Good understanding of vulnerability management, VAPT, system hardening, firewall/network security and cloud security.
• Experience coordinating security assessments, remediation and governance activities across multiple stakeholders.
• Ability to interpret vulnerability findings, CVE/CVSS information, risk assessments and security compliance reports.
• Good knowledge of cybersecurity policies, standards, controls and governance processes.
• Strong analytical, documentation, coordination and stakeholder management skills.
• Knowledge of AWS, Azure or other cloud security environments will be an advantage.
• Security+ / ISC2 CC / CISSP / CISM / CRISC / ISO 27001 or relevant cybersecurity certification is advantageous.