JOB PURPOSE

To support the implementation, operation, and continuous improvement of the organisation's cybersecurity framework by monitoring security systems, executing cybersecurity activities, responding to security incidents, conducting vulnerability assessments, and assisting in the implementation of security controls to protect the organisation's information assets and ensure compliance with established security standards and policies. 

KEY RESPONSIBILITIES 

i.                  Monitor and provide operational support for information security tools, including alert monitoring, triaging, and routine maintenance.

ii.                Assist in the execution of cybersecurity activities, including vulnerability management, application security, network security, and risk management.

iii.              Perform first-level incident response activities and support second-level incident investigations and computer forensics.

iv.              Implement and maintain information security controls, standards, and procedures in accordance with organisational policies.

v.                Conduct Vulnerability Assessment and Penetration Testing (VAPT) activities in accordance with established procedures.

vi.              Support security patch management activities to ensure systems remain secure and compliant.

vii.             Assist in assessing the effectiveness of security controls and identifying areas for improvement.

viii.           Support the assessment of third-party vendors for compliance with organisational cybersecurity requirements.

ix.             Monitor emerging cybersecurity threats, vulnerabilities, and industry best practices, and report findings to the team.

x.               Maintain strict confidentiality of all sensitive information security matters.

xi.              Assist in the development and maintenance of cybersecurity procedures, standards, and documentation.

xii.             Support the delivery of cybersecurity awareness and training sessions for employees and clients.

xiii.           Carry out such other duties as may be assigned to support the effective delivery of cybersecurity services. 

 

RESOURCE TO BE ALLOCATED

(Standard as allocated to all employees) 

QUALIFICATIONS & EXPERIENCE 

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field;
• 3 years of hands-on experience in cybersecurity, information security, or IT security consulting.
• At least 2 years in a client-facing or advisory/consulting capacity.

Strong knowledge of:

·        Security frameworks (ISO 27001, NIST, CIS Controls)

·        Network and infrastructure security

·        Cloud security (Azure/AWS)

·        Vulnerability assessment tools

·        Security governance, risk, and compliance

COMPETENCIES

Required Skills

·          Good interpersonal, communication and analytical skills;

·          Ability to learn job requirements and perform effectively in short time;

·          Ability to work under pressure and during odd hours to meet tight deadlines;

·          Required to travel abroad for overseas assignments;

·          Customer Service oriented and ability to negotiate with customers tactfully.