Job Purpose:

Responsible for protecting the organization’s computer networks, systems and data from cyber threats, unauthorized access and breaches. Act as the “digital security guard,” constantly monitoring infrastructure, access, applications, events and implementing safeguards to maintain the confidentiality, integrity and availability of sensitive information.

Key Responsibilities:

Continuous Monitoring and Incident Detection:

Monitor network traffic 24/7 for suspicious activity using Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) (e.g. Darktrace) tools.

Incident Response:

Act as a first responder to security breaches by investigating alerts, containing threats and working to restore systems to normal operation.

Vulnerability Assessments:

Regularly scan for system weaknesses and perform penetration testing (simulated attacks) to identify and patch security gaps before they are exploited.

Security Tool Maintenance:

Install, configure and update essential defense software, antivirus programs, and data encryption tools.

Policy Development and Enforcement:

Ensure adherence to Information Security Policies (ISP), standards, best practices and to guide employee behavior to meet regulatory requirements.

Security Awareness Training:

Educate employees and users on how to recognize phishing attempts, malware infections, unauthorized access, use of strong passwords and to follow safe digital practices.

Set-up regular training and awareness session with users and ensure documentary evidence of users attending training sessions.

Reporting and Compliance:

Prepare detailed reports on security metrics and incidents for the Cyber Security Lead and ensure the organization complies with legal and industry security standards.

Maintain detailed documentation of security incidents, investigations, and resolutions.

Education and/or Work Experience Requirements:

Education:

Bachelor’s degree or diploma in Computer Science, IT, or related acceptable qualification.

Experience:

Proven experience in cybersecurity operations, threat management or as a security analyst/engineer.

Technical Knowledge:

Proficiency in network security, endpoint protection, and security tools (e.g., SIEM, Privileged Access Management (PAM).

Knowledge of network security, cloud security, risk management and security infrastructure is essential.

Certifications:

Certifications such as, Certified Information Systems Security Professional (CISSP) or Global Information Assurance Certification (GIAC) is an advantage.

Key Requirements:

Analytical Thinking:

Ability to study complex datasets and identify subtle patterns that indicate a threat.

Ability to stay updated on the latest cyber threats and vulnerabilities by evaluating threat intelligence feeds and reports.

Problem-solving, attention to detail and strong communication skills are critical for identifying and mitigating threats.

Ability to identify AI risks that could pose a cyber security risk.

Effective Communication:

Translating highly technical security threats into understandable terms for non-technical stakeholders.

Detail-Oriented:

Vigilance in noticing minor system performance changes that could signal a breach.

Operating Systems:

Deep understanding of the various environments.

Network Security:

Proficiency in protocols (TCP/IP), DNS, VPNs, and proxies.

Scripting:

Ability to use languages like Python, PowerShell or Bash to automate repetitive security tasks and analyze log data.

• Monitor network traffic 24/7 for suspicious activity using Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) tools.
• Act as a first responder to security breaches by investigating alerts, containing threats and working to restore systems to normal operation.
• Regularly scan for system weaknesses and perform penetration testing to identify and patch security gaps.
• Install, configure and update essential defense software, antivirus programs, and data encryption tools.
• Ensure adherence to Information Security Policies (ISP), standards, best practices and to guide employee behavior to meet regulatory requirements.
• Educate employees and users on how to recognize phishing attempts, malware infections, unauthorized access, use of strong passwords and to follow safe digital practices.
• Set-up regular training and awareness session with users and ensure documentary evidence of users attending training sessions.
• Prepare detailed reports on security metrics and incidents for the Cyber Security Lead and ensure the organization complies with legal and industry security standards.
• Maintain detailed documentation of security incidents, investigations, and resolutions.

• Analytical Thinking
• Ability to study complex datasets and identify subtle patterns that indicate a threat.
• Ability to stay updated on the latest cyber threats and vulnerabilities by evaluating threat intelligence feeds and reports.
• Problem-solving
• Attention to detail
• Strong communication skills
• Ability to identify AI risks that could pose a cyber security risk.
• Effective Communication (translating technical threats to non-technical stakeholders)
• Vigilance
• Deep understanding of operating systems
• Proficiency in network security protocols (TCP/IP), DNS, VPNs, and proxies.
• Ability to use scripting languages like Python, PowerShell or Bash to automate repetitive security tasks and analyze log data.

• Bachelor’s degree or diploma in Computer Science, IT, or related acceptable qualification.
• Proven experience in cybersecurity operations, threat management or as a security analyst/engineer.
• Proficiency in network security, endpoint protection, and security tools (e.g., SIEM, Privileged Access Management (PAM).
• Knowledge of network security, cloud security, risk management and security infrastructure is essential.
• Certifications such as, Certified Information Systems Security Professional (CISSP) or Global Information Assurance Certification (GIAC) is an advantage.