Offer summary

Qualifications:

Bachelor's degree in Information Security, Computer Science, or related field., 3 to 5 years of experience in cybersecurity or IT risk management., Knowledge of security frameworks like ISO 27001 and NIST CSF., Hands-on experience with security tools such as firewalls, SIEMs, and endpoint protection..

Key responsibilities:

Develop and maintain security policies, standards, and procedures.

Monitor security alerts and respond to incidents promptly.

Conduct risk assessments, vulnerability scans, and penetration tests.

Collaborate with IT and cloud teams to ensure secure system configurations.

Job description

Position Overview

We are seeking a detail-oriented and proactive Information Security Specialist to protect our organizations information assets and ensure compliance with security policies and regulations. The role involves assessing risks, implementing security controls, monitoring threats, and working with cross-functional teams to strengthen overall information security posture. The ideal candidate will have a strong background in cybersecurity, risk management, and regulatory compliance.

Key Responsibilities

Develop, implement, and maintain information security policies, standards, and procedures.
Monitor security alerts and incidents to ensure quick detection and response.
Conduct risk assessments, vulnerability scans, and penetration testing to identify threats.
Manage identity and access management (IAM), ensuring proper user access controls.
Implement and maintain data protection, encryption, and endpoint security measures.
Support compliance with regulatory frameworks (ISO 27001, NIST, GDPR, HIPAA, PCI-DSS).
Perform security awareness training to improve organizational security culture.
Assist in the development of incident response and disaster recovery plans.
Evaluate and recommend security technologies, tools, and vendors.
Collaborate with IT, DevOps, and cloud teams to ensure secure system configurations.
Prepare reports on security posture, risks, and compliance status for management.

Qualifications

Bachelors degree in Information Security, Computer Science, or related field.
3 - 5 years of experience in information security, cybersecurity, or IT risk management.
Knowledge of security frameworks (ISO 27001, NIST CSF, CIS Controls).
Hands-on experience with firewalls, IDS/IPS, SIEMs, endpoint protection, and DLP tools.
Familiarity with cloud security (AWS, Azure, GCP) and on-premises environments.
Strong understanding of network protocols, operating systems, and encryption techniques.
Excellent problem-solving, analytical, and communication skills.

Preferred Skills

Professional certifications such as:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Information Systems Auditor (CISA)
- CompTIA Security+ / CySA+
Experience with threat intelligence platforms, SOAR, and security automation.
Knowledge of identity governance, Zero Trust, and secure SDLC practices.