Security Tech Specialist

Reports to: Manager Tech

Key responsibilities: 

• Security policy development and implementation: Develop and implement comprehensive security policies and procedures to safeguard the organization's IT infrastructure and data. Regularly review and update security documentation to ensure it aligns with evolving threats and regulatory requirements. 

• Risk management and vulnerability assessment: Conduct thorough risk assessments and vulnerability scans to identify potential weaknesses in the IT environment. Perform regular security audits and assessments to validate the effectiveness of existing security measures and investigate and mitigate identified security threats to minimize associated risks. 

• Network and system monitoring: Continuously monitor network traffic for suspicious activity and take proactive measures to prevent potential threats. Maintain and update security systems, such as firewalls and intrusion detection/prevention systems, as well as other security tools to protect against emerging threats. 

• Incident response and threat management: Respond effectively to security incidents and breaches by leading investigations and implementing resolution strategies. Develop and maintain robust incident response plans to ensure swift and effective handling of future security threats, and coordinate with external security vendors and consultants to manage complex incidents. 

• Collaboration and secure system design: Collaborate with IT teams to design and develop secure systems, integrating security considerations throughout the development process. Ensure that cloud-based systems are configured and maintained securely to protect against potential vulnerabilities. 

• Compliance and regulation: Ensure adherence to relevant regulations and security standards, such as GDPR, HIPAA etc., by implementing necessary compliance measures. Prepare and present detailed security reports to management, highlighting the current security status, risks, and recommendations for improvements. 

• Access control and data protection: Manage access controls and user permissions to ensure that only authorized personnel can access sensitive data. Implement encryption and other data protection measures to safeguard sensitive information from unauthorized access and breaches. 

• Penetration testing and ethical hacking: Perform penetration testing and ethical hacking to identify potential vulnerabilities in the IT infrastructure and recommend appropriate fixes to strengthen security defenses. 

• Disaster recovery and continuity planning: Participate in disaster recovery planning by integrating security measures into business continuity strategies to ensure resilience and minimal disruption in the event of a disaster. 

• Training and development: Collaborate with the department’s manager to design and implement training programs. Mentor staff, create training materials, and conduct workshops to support high service standards, compliance, and team growth. 
• Perform other duties as assigned: Additional responsibilities may be required as needed, ensuring flexibility in addressing evolving business needs and supporting the overall success of the team and clients.

 

 Requirements: 

• Educational background: Bachelor's degree in information technology, Computer Science, Cybersecurity, or a related field. An advanced degree or specialization in cybersecurity is preferred. 

• Experience: 3-5 years of experience in IT security, cybersecurity, or related roles.  

• Technical knowledge: Strong expertise in network security, enterprise security applications, vulnerability management, and incident response. Proficiency with security tools and technologies is essential. 

• Certifications: Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), CompTIA Security+, or similar industry standards are highly desirable. 

Skills: 

• Effective communication: Written and verbal communication skills for reporting and interacting with stakeholders. 

• Team collaboration: Proven ability to work effectively both independently and as part of a team.  

• Problem solving: Ability to address and resolve issues and compliance challenges effectively. 

• Organizational and time management skills: Strong organizational skills with the ability to manage multiple tasks and meet deadlines in a dynamic environment. 

• Adaptability: Ability to adapt to changes in regulations, procedures, and organizational priorities. 

• Attention to detail: High level of accuracy in documentation and reporting to ensure compliance and quality. 

• Ethics and integrity: High ethical standards and the ability to act with integrity in all situations. 

 Application Deadline: April 6th, 2025.