Group Cyber Security Specialist

Job Responsibilities

• Monitor, analyze, and respond to security alerts and events using SIEM and other security monitoring tools.
• Investigate suspicious activity, contain threats, and lead incident response efforts.
• Develop, maintain, and periodically test incident response plans and playbooks.
• Document incidents, response actions, and lessons learned.

Risk Assessment and Vulnerability Management

• Conduct regular vulnerability scans and coordinate penetration testing activities.
• Identify, assess, and prioritize security risks; recommend and track remediation efforts.
• Perform security audits and support compliance assessments.
• Ensure patch management processes are effectively implemented and maintained.
• Continuously evaluate emerging threats and recommend mitigation strategies.

Security Controls and Implementation

• Implement, configure, and maintain firewalls, IDS/IPS, endpoint protection, EDR solutions, and other security technologies.
• Manage identity and access controls, enforcing least privilege and zero-trust principles where applicable.
• Design and maintain secure network architectures and system configurations.
• Oversee encryption standards and data protection controls for data at rest and in transit.
• Participate in security reviews for new systems, applications, and infrastructure changes.

Policies & Compliance

• Develop, update, and enforce cybersecurity policies, standards, and procedures.
• Ensure compliance with applicable regulatory and industry standards.
• Support internal and external audits and remediation of findings.
• Contribute to business continuity and disaster recovery planning efforts.

Awareness & Training

• Deliver cybersecurity awareness training and promote a security-first culture.
• Provide guidance on secure system configuration and secure development practices.
• Partner with IT and business stakeholders to integrate security into operational processes.