Cybersecurity Specialist

Position Overview:

We are seeking a highly skilled and detail-oriented Cybersecurity Specialist to join our team. The ideal candidate will have a strong background in cybersecurity, risk management, and a passion for protecting our organization's digital assets and information. As a Cybersecurity Specialist, you will be responsible for safeguarding our networks, systems, and data from potential threats, ensuring compliance with security policies, and responding to security incidents.

Key Responsibilities:

1. Security Monitoring & Incident Response: Monitor security alerts and system logs for suspicious activities, analyze security incidents, and lead investigations to determine the scope of security breaches.
2. Network Security Management: Configure and manage firewalls, intrusion detection/prevention systems (Darktrace/IDS/IPS), and other security measures to protect the organization's networks.
3. Vulnerability Management: Perform regular vulnerability assessments, penetration tests, and risk assessments to identify potential security weaknesses and provide remediation recommendations.
4. Security Awareness & Training: Develop and deliver cybersecurity awareness programs for employees to enhance their knowledge of security best practices and reduce human error-related risks.
5. Compliance & Governance: Ensure the organization complies with relevant security regulations and industry standards (e.g., MAS, ISO 27001, SOC). Maintain and update security policies and procedures as necessary.
6. System & Data Protection: Manage the protection of critical systems and data through encryption, backup, and access control mechanisms. Review and enforce security protocols for applications and databases.
7. Security Architecture & Design: Collaborate with IT teams to design and implement secure systems and infrastructure to mitigate risks. Participate in the development and implementation of security architecture across the organization.
8. Collaboration: Work with cross-functional teams (e.g., IT, Legal, Compliance) to assess risks, resolve security challenges, and ensure the safe use of technology within the organization.
9. Documentation & Reporting: Maintain clear documentation of security incidents, vulnerability reports, and remediation actions. Provide regular reports to management regarding the security posture of the organization.
10. Ad-Hoc Network Support: Maintain and support current pool of Azure and AWS VMs together with a number of SQL Server instances. Provide secondary cover for infrastructure support tasks on a required basis.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Minimum 2 years’ experience in a cybersecurity or IT security role, with hands-on experience in network and systems security.
• In-depth knowledge of common security frameworks, protocols, and tools, including firewalls, IDS/IPS, VPNs, endpoint protection, and encryption.
• Experience with security tools like SIEM, vulnerability scanners, antivirus/antimalware software, and cloud security platforms would be an advantage.
• Solid understanding of risk management principles and the ability to conduct risk assessments and mitigate identified risks.
• Knowledge of regulatory requirements and standards (e.g., MAS TRM and ISO 27001).
• Strong analytical and problem-solving skills, with the ability to think critically under pressure.
• Excellent communication and collaboration skills, capable of explaining technical issues to non-technical staff and stakeholders.