Job Decription
descriptions of specific tasks & duties • Ensure good security governance and best practices in all digital projects and act as an advocate for security best practices across all departments • Be involved in the build, deployment and ongoing management of digital products, infrastructure, and services to imbed security by design • Using a variety of tools assess our infrastructure for security vulnerabilities and security posture to enable prioritization of remediation • Help design, develop, and operationalise monitoring, correlation, and alerting capabilities for our network, infrastructure, and applications to identify suspicious or anomalous behaviour along with weak configurations • Contribute to the implementation and maintenance of security controls • Provide a security response service, deal with security issues and work pro-actively to monitor systems and identify issues before they arise • Provide Information Security SME reviews and approvals (rejects) of changes affecting security posture • Assist in security compliance and assurance activities, including the development and maintenance of relevant logs, reviews, and registers • Create and maintain information security-related documentation • Contribute and Influence direction of Internal Audits and other audit type functions to elevate critical issues for visibility • Ingest threat intelligence from a variety of sources and turn into actionable intelligence Qualifications • Bachelor’s degree in computer science, engineering, or related field experience with a minimum of 3 years in an information technology role or exhibit a desire to move from a technical role into Information Security • Desire to study for a Qualification in a basic security certification (CompTia+ etc) • Expert analytical and reporting skills • Expert in Microsoft Office (Word, Excel, PowerPoint, Access) • Ability to effectively communicate and positively influence diverse stakeholders and team members • Fluent in English (Required) • Experience in multinational or enterprise size company and dealing with complex organizational structures across multiple time zones • Demonstrate experience in highly pressured environments with competing priorities with the ability to drive and assert security requirements • Demonstrate the ability show assertiveness and a determination to uphold security if needed • Experience with Windows servers, Linux, SQL, O365, Firewalls, IPS, MS Azure cloud • Experience with network and Endpoint Security Infrastructure, SIEM, AV, EDR, IPS, Firewall, WAF, DLP, VPN, CASB an advantage