Information Technology Security Specialist

About the role

We are seeking an Information Technology Security Specialist to lead and enhance our enterprise cyber security posture across on‑premises, cloud and end‑user environments. The role will define strategy, drive governance, and ensure rapid response to security incidents while maintaining compliance with leading frameworks.

Key responsibilities

• Lead and manage cyber security operations across infrastructure, cloud platforms, applications and user environments.
• Define and implement security strategies, policies, standards and procedures aligned with business objectives.
• Oversee incident detection, analysis, containment, eradication, recovery and post‑incident review.
• Develop, test and maintain incident response plans, runbooks and playbooks.
• Own vulnerability management programs, conduct VAPT activities and drive patch management.
• Prioritise remediation based on risk exposure and validate effectiveness of fixes.
• Conduct enterprise risk assessments, ensure compliance with regulations (e.g., ISO 27001, NIST) and support internal and external audits.
• Manage MSSPs, OEMs and technology partners, establishing SLAs, SLOs and performance metrics.

Required profile

• Proven experience leading enterprise‑wide cyber security operations.
• Strong knowledge of security governance frameworks such as NIST, ISO 27001, MITRE ATT&CK®, COBIT and ITIL.
• Demonstrated ability to handle security incidents from detection through recovery.
• Experience managing vulnerability assessment, penetration testing and patch management programs.
• Solid background in risk assessment, compliance and audit support.
• Effective coordination with internal stakeholders, MSSPs and external partners.

Required skills

• NIST framework
• ISO 27001
• MITRE ATT&CK®
• COBIT
• ITIL
• Vulnerability Assessment and Penetration Testing (VAPT)
• Patch Management
• Incident Response
• Security Governance
• Risk Assessment
• MSSP Management