IT Security Specialist

Scope:

IT Security Specialist will be responsible for safeguarding the organization's information systems by identifying vulnerabilities, managing risks, and implementing security measures. This role involves the design, implementation, and monitoring of security strategies to protect sensitive data and ensure compliance with relevant laws and regulations.

Role & responsibilities

IT/Information Security Strategy

• Collaborate with the Group IT Infrastructure Head to align IT/Information Security strategies with business goals and operating models.
• Identify gaps and contribute to developing security strategies and architectures by recommending and implementing solutions.
• Support the execution of IT/Information Security strategies aligned with organizational priorities.
• Develop and propose security strategies to address risks, ensuring compliance with industry standards and best practices.

Information Security Program

• Develop and maintain information security policies, procedures, and guidelines based on ISO 27000 standards.
• Assist IT units in identifying vital business functions, evaluating confidentiality, integrity, and availability (CIA), and recommending necessary controls within budget constraints.
• Identify compliance requirements (e.g., PCI-DSS, Data Protection), document them, and provide recommendations for controls to management.
• Conduct audits on information security policies and procedures to ensure compliance and improve security posture through vulnerability analysis and remediation.
• Collaborate with teams to integrate security standards into projects, processes, and systems, while leading security awareness and training programs.

IT Security Operations

• Monitor and analyze security alerts and logs, distributing information to relevant stakeholders as needed.
• Perform daily log reviews, report exceptions, and assist technical teams in establishing security baselines and auditing changes.
• Oversee the status and functionality of critical assets, such as backups and disaster recovery measures, ensuring availability and continuity.
• Monitor Security Incident & Event Management (SIEM) systems, identify malicious patterns, and initiate necessary actions and escalations.
• Collect and report on security-related KPIs, CSFs, and KRIs to management.

Security Incident Management

• Maintain and enhance security incident response plans and models, providing awareness and training for incident handlers.
• Handle security incidents at the primary level, developing and updating incident models as needed.
• Perform initial assessments of breaches, gather forensics, and recommend procedures for containment without compromising evidence collection.
• Prepare incident reports, evaluate findings, and recommend and implement approved security controls, tools, and solutions based on incidents.

Preferred candidate profile

Education

• Degree in Computer Science, IT, Engineering, or Science.
• Certifications such as AWS Certified Security, CEH, CISSP, CISA, and ISO 27000 are required.
• Knowledge of ITIL and ISO2000 standards is desirable.

Experience

• At least 10 years of IT experience.
• Minimum of 3-5 years in IT Security Specialist or Information Security Analyst roles.

Skills

• Broad knowledge and experience in IT Infrastructure, Network, and Application administration.
• Expertise in security technologies, including:
• Antivirus and Anti-malware software.
• Encryption technologies and Endpoint Protection Platforms.
• Threat intelligence platforms and Cloud security technologies.
• Data Loss Prevention (DLP) solutions and SIEM systems.
• Access control and Privileged Identity Management solutions.
• Analyzing Next-Generation Firewalls and Web Applications for anomalies.
• Conducting vulnerability assessments and coordinating remediation efforts with IT Business Units.
• Strong communication, analytical, and technical/business writing skills.
• Project management experience and skills are highly desirable.

Perks and benefits