Job Title

IT Security Officer (ITSO)

Job Summary

We are seeking IT Security Officers to support the organisation's cybersecurity operations across multiple hosting environments, includingon-premise, Government Data Centre (GDC), Government Commercial Cloud (GCC), GCC+, and other cloud platforms. The role involves security monitoring, system hardening, vulnerability management, governance compliance, and advisory support to system and infrastructure teams.

Key Responsibilities

• Conduct system security reviews, hardening checks, and risk assessments based on recognised benchmarks (e.g. CIS).
• Develop, review, and maintain security baselines, SOPs, and compliance documentation.
• Monitor and respond to security alerts, including phishing incidents, malware alerts, vulnerability scans, and penetration test findings.
• Review cloud security posture findings using CSPM and governance tools, assess alert validity, and follow up with system owners on remediation actions.
• Track remediation progress and escalate unresolved security issues where required.
• Provide security advisory support for new systems, projects, and enhancements.
• Perform risk-based prioritisation of security findings and respond to audit RFIs.
• Prepare periodic security status reports and support IT security awareness activities.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• At least one internationally recognised security certification (e.g. CISSP, CISM, CRISC, CISA) highly preferred.
• Minimum 2 years of experience in cloud cybersecurity and vulnerability management across on-premise, GDC, GCC and GCC+ environments.
• Familiarity with security and monitoring platforms such as Azure Log Analytics, AWS CloudWatch, AWS Security Hub (CSPM), and Microsoft Defender for Cloud is an advantage.
• Strong analytical, problem-solving, and communication skills.

General Requirements

• Strong teamwork and collaboration skills.
• Ability to work with technical teams, stakeholders, and external vendors.