IT Security Specialist

To implement and maintain our security systems by preventing unauthorized access to our data and responding to privacy breaches.

Education Requirements:

• Bachelor’s degree in information security, Computer Science, IT, or a related field; or equivalent professional experience.
  

• Industry-recognized security certifications such as Cisco Security (CCNP Security, CCIE Security), OSCP, SSCP, CEH, CISSP, GIAC certifications, Microsoft Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, or similar.
  

Work Experience:

• 4+ years’ experience in cyber security analysis, security engineering, or a similar role.
  

• Hands-on experience with SIEM platforms, endpoint security, and vulnerability and patch management tools
  

• Clear understanding of compliance requirements in financial services or regulated sectors.
  

• 2 years in a Supervisory role will be of added advantage.
  

• Conduct compliance assessments by understanding business objectives, structure, policies and procedures, internal controls, and external regulations
  

• Design and implement safety measures and data recovery plans
  

• Document systems, processes and controls using narratives, flow charts, data flow diagrams, etc.
  

• Understand and communicate the downstream impact on the business of control deficiencies.
  

• Advise and collaborate on projects by providing IT controls and risk expertise and considerations
  

• Analyse IT specifications to assess security risks.
  

• Install, configure and upgrade security software/applications.
  

• Secure networks through firewalls, password protection and other systems
  

• Inspect hardware for vulnerable points of access
  

• Monitor network activity to identify issues early and communicate them to IT teams
  

• Act on privacy breaches and malware threats • Serve as a security expert and conduct trainings when needed
  

• Draft security policies and guidelines
  

• Completes audit work papers by documenting audit tests and findings
  

• Collaborate with control owners to implement process changes and track to completion
  

• Implementation of IT security strategy