The posting
Key Responsibilities:
Security Architecture
- Assist in maintaining security architecture diagrams, records, and approved design documentation.
- Track security architecture review requests and coordinate inputs from project teams and relevant stakeholders.
- Maintain records of architecture decisions, recommendations, and approved designs.
- Support preparation of security advisory materials and architecture review documentation.
Vulnerability Assessment & Penetration Testing
- Coordinate and schedule VAPT engagements with system owners, vendors, and security testers.
- Maintain VAPT records and follow up on remediation of identified vulnerabilities.
- Coordinate re-testing activities and update finding closure status.
- Assist in preparing VAPT reports, summaries, and presentation materials.
Risk Assessment
- Coordinate cybersecurity risk assessment exercises with system owners and stakeholders.
- Maintain cybersecurity risk records and track risk treatment and remediation actions.
- Support preparation of risk reports and management review materials.
- Facilitate risk acceptance, exception, and approval processes in accordance with organizational requirements.
Hardening Compliance
- Coordinate security hardening compliance assessments with system and infrastructure teams.
- Track hardening gaps and follow up on remediation progress.
- Maintain hardening compliance records, checklists, and trackers.
- Support preparation of periodic hardening compliance reports.
Cloud Security Posture Management
- Monitor and triage findings generated by Cloud Security Posture Management tools.
- Track cloud security misconfigurations and follow up on remediation with system and cloud owners.
- Maintain CSPM findings and remediation status records.
- Prepare periodic cloud security posture reports and summaries.
Software Clearance
- Receive, log, and track software security clearance requests.
- Coordinate with requestors and vendors to obtain required technical and security documentation.
- Maintain software clearance records and approval status.
- Support preparation of software security evaluation summaries and monitor expiring clearances.
Firewall & Network Deviation Management
- Receive, track, and maintain firewall rule change and network security deviation requests.
- Follow up with requestors and network teams on outstanding actions and expiring deviations.
- Maintain deviation records and prepare review summaries for approval.
- Coordinate periodic firewall rule and network deviation reviews with relevant teams.
Policy, Standards & Governance / Cyber Specifications
- Assist in drafting, reviewing, and updating cybersecurity policies, standards, guidelines, and procedures.
- Maintain the cybersecurity policy and standards documentation repository.
- Track document review cycles, approvals, and expiry dates.
- Support preparation and review of cybersecurity specifications for projects and procurement activities.
Security Metrics & Reporting
- Collate and consolidate cybersecurity data and status updates from relevant teams and systems.
- Maintain cybersecurity dashboards covering vulnerabilities, risks, deviations, compliance, and audit items.
- Prepare routine security metrics and management reports.
- Follow up with responsible parties on outstanding cybersecurity actions and remediation items.
Security & Compliance
- Ensure activities are performed in accordance with organizational cybersecurity policies, applicable regulatory requirements, and relevant cybersecurity standards.
- Support cybersecurity assessments, internal and external audits, and evidence collection activities.
- Maintain accurate and up-to-date cybersecurity records, reports, registers, and supporting documentation.
- Protect sensitive and security-classified information in accordance with organizational requirements.
Technical Requirements
Mandatory Technical Skills
- Good understanding of enterprise cybersecurity concepts, including vulnerability management, security risk assessment, system hardening, firewall controls, cloud security, and security governance.
- Experience coordinating cybersecurity assessments, remediation activities, and security review processes involving multiple technical and business stakeholders.
- Ability to review and understand vulnerability assessment findings, security risk assessments, security architecture diagrams, firewall rules, and security compliance reports.
- Familiarity with security frameworks, policies, standards, and cybersecurity governance processes.
- Strong analytical, documentation, stakeholder coordination, and follow-up skills.
Good-to-Have
- Familiarity with CSPM platforms and cloud security concepts across AWS, Azure, or equivalent cloud environments.
- Experience with vulnerability management or VAPT tools and interpreting CVE/CVSS information.
- Understanding of enterprise network architecture, firewall rules, security zones, and network segmentation.
- Experience supporting cybersecurity audits, governance, risk, and compliance activities.
Certifications
- CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or equivalent foundational cybersecurity certification is highly preferred.
- Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent will be advantageous.
- Certified in Risk and Information Systems Control (CRISC), ISO 27001-related certification, or equivalent risk/governance certification will be advantageous.
- Relevant cloud security certification such as Microsoft Azure Security, AWS Security, or equivalent will be advantageous.
