National Ambulance
Our company is looking for an Information Security Specialist to re-engineer and monitor existing IT security systems to protect our organization’s systems and networks from cyber-attacks and maintain security standards.
Job Type: Full-time
Roles and Responsibilities:
Develop and maintain organization-wide best practices for IT security.
Monitor and defend the organization’s computer hardware, software, and other systems from theft, loss, and other cyberattacks.
Design and configure Information security solutions.
Document all security issues or breaches found.
Perform risk assessment, compliance checks, vulnerability detection, and policy enforcement activities.
Vulnerability Management, Detection & Response.
Threat Protection & Continuous Monitoring.
Review IT Policies, develop / review standards, procedures and guidelines.
Incidence Response planning.
Physical Security Controls.
Perform security assessment of procured and tendered IT systems and solutions.
Coordinate and supervise vendors to perform VAPT.
Assist in creating the Business Continuity Plan and perform related Business Impact Assessment activities.
Lead DR drill operations.
Review existing configuration and recommend any changes as per best practices.
Switching & Routing mid-level knowledge and experience.
Develop and deliver Security awareness training.
Qualifications
Proven work experience as an Information Security or similar role
Experience with computer network penetration testing and techniques
Understanding of firewalls, proxies, antivirus, and IPS concepts
Bachelor’s degree in computer science or a related field is preferred
Understanding of hacking life cycle and Mitre Att@ck Framework.
Understanding of industry frameworks such as CIS, ISO 27000
Preferred to have minimum CISM or any other equivalent or higher Industry standard security-related certifications.
Must have a bachelor’s/master’s degree in Information Technology.
Tools and Technologies:
Ideally experience and background with the following:
Office 365, Server Virtualization, Endpoint Protection, Patch Management, Email Security Gateway (Cisco IronPort), Web Application Firewall, Privilege Access Management, Network Management, Firewall (mainly FortiGate), NAC, DLP Solution, Wireless Solutions.