IT Security Officer

We are looking for an IT Security Officer (Consultant) to strengthen our security operations and governance. In this role, you will oversee security vendors, manage testing cycles, and provide expert consultancy — ensuring that government systems remain resilient against evolving cyber threats.

Key Responsibilities

• Manage security vendors and deliverables.
• Manage periodic security testing cycles.
• Assess mitigation and remediation plans for adequacy and effectiveness.
• Drive timely and effective mitigation and remediation of identified risks.
• Review security reports, alerts, and advisories.
• Review security policies, standards, procedures, and guidelines.
• Provide cybersecurity consultancy to internal teams and key stakeholders.
• Respond to security alerts, advisories, and handle incidents.
• Conduct security awareness training across the organization.
• Broadcast email security advisories to end users.

Job Requirements

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience: Minimum of 4 to 7 years of experience in a cybersecurity analyst, security consultant, or similar role.
• Certifications: Mandatory CISSP and/or CISM certification.
• Technical Knowledge: Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
• Security Tooling: Proficiency with security tools such as vulnerability scanners, penetration testing tools, and SIEM platforms.
• Automation: Experience with scripting languages (e.g., Python, PowerShell) for task automation.
• Frameworks: Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
• Soft Skills: Excellent analytical, problem-solving, and time-management skills, with the ability to communicate technical information clearly to non-technical audiences.

Preferred Competencies

• Strong understanding of vulnerabilities listed in the Open Web Application Security Project (OWASP Top 10).
• Hands-on understanding of incident management and threat handling.
• Prior experience in software development or security operations (SecOps) is preferred.
• Advantageous certifications: GIAC (GCIH), CompTIA Security+/CySA+, EC-Council (CEH/ECSA), SSCP, or OSCP.