[LPS] IT Security Officer

Responsibilities

• ● , and escalate cybersecurity incidents and critical security threat events as required.
• ● Conduct information security awareness trainings to cultivate a security-conscious culture among staff.
• ● Stay current with emerging threats, vulnerabilities, and threat intelligence related to cloud platforms.
• ● Disseminate security advisories, threat intelligence reports, security directives, and patch recommendations promptly to the relevant stakeholders in the agencies.
• ● Partake in tabletop exercises, security risk management activities, audits and third-party assessments to enhance incident response readiness. 2. Security Product Management
• ● Perform Vulnerability Assessments (Tenable Nessus) on applications (e.g. web client/server, mobile apps), networking and computing devices (e.g. firmware, Operating System).
• ● Analyse vulnerability scan results, recommend remediation actions, and track resolution status.
• ● Monitor security events on SIEM (e.g. Splunk, Cortex, Exa beam), perform event triage and analysis.
• ● Perform onboarding and vulnerability scanning of computing devices before connecting to the corporate network to ensure compliance with cyber hygiene standards. 3. Security Governance & Compliance
• ● Conduct periodic security reviews to ensure adherence to IT Security Policies, Standards, Controls and industry best practices.
• ● Recommend and implement security initiatives and enhancement based on findings from tabletop exercises (TTX) and audits.
• ● Monitor and ensure compliance with secure configuration standards across network, systems and endpoint (i.e. CIS Hardening) at agencies.
• ● Analyse Vulnerability Assessment (VA) scan results, track and report remediation status according to the stipulated timeframe. 4. Network, Systems and Endpoint Security
• ● Manage, configure, and optimize security tools and platforms to ensure effective integration with network and IT infrastructure.
• ● Manage network, system, endpoint and runtime security of on-premises and cloud environments.
• ● Perform regular reviews of accounts for both on-premises and on cloud systems/applications. 5. Documentation and Reporting
• ● Implement and update security policies, technical baselines, Standard Operating Procedures (SOPs).
• ● Maintain documentation of security incidents, vulnerability assessments, security checklist, security controls and policies.
• ● Prepare and deliver regular reports to update security performance metrics, incident trends, compliance status and risk mitigation efforts.
• ● Ensure timely escalation and reporting of cybersecurity incidents to management and stakeholders. 6. Collaboration and Stakeholder Management