IT Security Officer at Ascentech Services Limited

About the job

• We are seeking a motivated and detail-oriented IT Security Officer with 2 to 4 years of experience to join our growing team.
• As the IT Security Officer, you will be responsible for protecting our organization’s information systems by developing, implementing, and maintaining security protocols and measures.
• This role requires a proactive mindset and a strong understanding of various security technologies and best practices.

Key Responsibilities:

• Monitor and respond to security incidents and alerts, investigating potential security breaches and threats.
• Conduct regular security assessments and audits to identify vulnerabilities within the IT infrastructure.
• Develop and implement security policies, procedures, and standards to safeguard sensitive information.
• Collaborate with IT staff to ensure that security measures are integrated into the organizational technology systems and processes.
• Provide training and support to employees on security awareness and best practices.
• Maintain and update security documentation, including incident reports, system configurations, and compliance requirements.
• Stay current with emerging security trends, threats, and technology solutions.
• Assist with compliance efforts related to industry standards and regulations (e.g., GDPR, HIPAA, PCI-DSS).
• Participate in disaster recovery and business continuity planning efforts.

Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field, or equivalent work experience.
• 2 to 4 years of experience in IT security, risk management, or a related discipline.
• Strong knowledge of security architecture, threat modeling, and vulnerability assessment tools.
• Familiarity with firewalls, intrusion detection/prevention systems, and endpoint security solutions.
• Understanding of common compliance frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Excellent analytical and problem-solving skills, with the ability to work under pressure.
• Strong communication skills, both written and verbal, with the ability to convey complex technical information to non-technical stakeholders.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.