It Security Officer

Job description

**Job Responsibilities** - Manage security configurations and policies across Firewalls, Proxy, SIEM, Secure Web Gateway (SWG), Data Loss Prevention (DLP), Zero Trust Network Access (ZTNA), EDR/XDR, IPS, and other cybersecurity solutions. - Conduct security assessments through Vulnerability Assessments, risk analysis, and security reviews. - Perform self-assessments against cybersecurity standards and frameworks such as NIST CSF and ISO 27001. - Support the implementation and sustenance of ISO 27001:2022. Assist IT teams during internal and external audits, risk assessments, and compliance activities. - Maintain and continuously improve the organization's Incident Response Plan (IRP), Disaster Recovery (DR), and Business Continuity (BCP) security requirements. - Ensure compliance with email security standards including SPF, DKIM, and DMARC, and manage anti-spam and anti-phishing controls. - Manage and implement security controls for cloud environments (AWS, GCP, and Google Workspace), including IAM, security monitoring, logging, data protection, and compliance. - Ensure timely closure of SOC incidents, reduce false positives, improve Mean Time to Respond (MTTR), and implement SOAR playbooks for repetitive security use cases. - Possess working knowledge of API Security, Web/Application Security (WAF), and Vulnerability Assessment & Penetration Testing (VAPT). - Have working knowledge of Operational Technology (OT) Security, IEC 62443 standards, Purdue Model, industrial network segmentation, and secure remote access. - Perform third-party/vendor security assessments and ensure compliance with organizational security requirements. - Investigate security incidents and prepare reports detailing root cause, impact, and corrective actions. - Stay updated with the latest cybersecurity threats, vulnerabilities, technologies, and industry best practices. - Develop, review, and maintain cybersecurity policies, standards, procedures, and security documentation. - Recommend security improvements and risk mitigation measures to management and IT leadership. - Provide technical guidance to IT teams and end users on cybersecurity tools, secure practices, and security procedures. - Drive cybersecurity awareness programs, phishing simulation campaigns, and user awareness initiatives independently. **Additional Responsibilities** - Monitor cybersecurity posture through security dashboards, KPIs, and compliance metrics. - Coordinate with SOC, IT Infrastructure, Cloud, and Application teams for timely remediation of security findings. - Manage vulnerability remediation and patch compliance by working closely with infrastructure and application teams. - Review firewall, VPN, privileged access, and security rule change requests from a cybersecurity perspective. - Participate in new IT project reviews and ensure Security by Design principles are incorporated. - Ensure compliance with regulatory requirements such as DPDPA, CERT-In directions, and other applicable cybersecurity regulations. - Evaluate new cybersecurity technologies and recommend security improvements based on business requirements. - Support cyber incident investigations, digital forensics, and evidence collection when required.