IT Security Lead

We are looking for a cybersecurity specialist with a degree in computer science or a related field and at least 3 years of experience in information security. The role involves implementing and monitoring security measures, managing network configurations, and ensuring compliance through audits. You will work with the IT team to set up security software, address risks, and document security procedures. Strong knowledge of EDR/XDR, SIEM, vulnerability management, and Microsoft products is required. The candidate should be able to explain security practices to nontechnical teams and work independently with initiative.

Requirements:

• Bachelors degree in computer science or a technology-related field.
• Minimum 3 years of verifiable experience as a cybersecurity specialist or in a related role.
• Experience in information security and infrastructure development/operations.
• Strong problem-solving and analytical skills.
• Proficient in developing and maintaining tools, procedures, and documentation.
• Solid understanding of various information security frameworks.
• Ability to educate nontechnical audiences on security measures.
• Self-motivated, with initiative and integrity.
• Familiarity with Microsoft products, vulnerability management, EDR/XDR, and SIEM.

Summary of duties:

1. Support IT Security Operational based on policies and procedures.
2. Implement, monitor, and document IT infrastructure, system hardening, and software patches/updates.
3. Monitor and manage the network configuration and computer systems operation.
4. Performing internal audits to ensure there is a satisfactory level of regulation compliance.
5. Document and administer IT Security standards.
6. Report to the superiors about vulnerabilities and necessary actions.
7. Resolve security issues by:

• Working with IT to set up security software.
• Collaborating with IT to mitigate risks.
• Compiling audit-related documents with IT.
• Ensuring secure communication and data protection across department.
• Analyzing security procedures, identifying threats, and resolving incidents.
• Monitoring security tools.
• Supporting deployment of security-related servers and network infrastructure.