IT Security Specialist

Position Overview

We are seeking a dedicated and experienced IT Security Specialist to join our dynamic team. In this critical role, you will be responsible for safeguarding our organization’s digital infrastructure by implementing robust security measures, monitoring threats, and ensuring compliance with industry regulations. The ideal candidate will possess a strong technical background in cybersecurity, a proactive approach to risk management, and the ability to collaborate effectively with cross-functional teams to mitigate potential security vulnerabilities.

Key Responsibilities

• Cybersecurity Operations: Execute daily cybersecurity tasks while ensuring strict adherence to established security policies and operational risk management frameworks. Monitor security controls, assess system health, and maintain comprehensive logs to identify potential vulnerabilities.
• Public Key Infrastructure (PKI) Management: Perform routine maintenance and support for PKI components, ensuring the integrity and security of cryptographic systems. Verify that technical implementations and service changes comply with security policies and regulatory standards.
• Risk Identification and Reporting: Identify and report potential cyber risks during system implementations and daily operations. Monitor security consoles and alerts, assessing threats and escalating critical issues to senior leadership for timely resolution.
• Security Tool Administration: Maintain and configure security tools, including vulnerability scanners, endpoint protection systems, and Security Information and Event Management (SIEM) solutions. Ensure these tools are updated with the latest patches to maximize their effectiveness.
• Incident Response and Triage: Assist in the initial containment and triage of security incidents by following established incident response procedures. Support security testing activities, such as penetration tests, and provide guidance on security best practices for system configurations.
• Compliance and Auditing Support: Work closely with internal and external auditors to provide necessary documentation and data, ensuring compliance with regulatory and industry requirements. Assist in addressing audit gaps and implementing corrective actions to maintain a secure environment.
• Vulnerability Assessments and Reporting: Conduct scheduled vulnerability assessments using established tools and document findings for review and remediation planning. Produce clear, concise technical reports detailing monitoring activities, security tool status, and incident support efforts.
• Continuous Learning and Innovation: Stay current with emerging security threats, attack vectors, and evolving security technologies. Apply this knowledge to enhance existing security measures and recommend improvements to safeguard organizational assets.
• Collaboration and Communication: Work collaboratively with internal teams to identify risks, prevent future incidents, and promote a culture of security awareness across the organization. Communicate technical information effectively to non-technical personnel to ensure a shared understanding of security priorities.

Requirements

• Education and Experience: A bachelor’s or master’s degree in Information Security, Computer Science, Engineering, or a related field. Candidates should have 2-5 years of experience in the IT security field, preferably within the payments, banking, or financial services sectors.
• Technical Proficiency: Strong knowledge of security systems, including vulnerability management, endpoint protection, SIEM solutions, and PKI. Certification in a recognized security framework (e.g., CISSP, CISM, CEH) is highly desirable.
• Analytical and Problem-Solving Skills: An analytical mindset with a keen eye for detail, enabling you to probe deeper into data and identify potential security gaps. Excellent technical research skills to stay ahead of evolving threats and recommend proactive solutions.
• Communication and Collaboration: Outstanding written and verbal communication skills to document technical findings and convey security concepts to diverse audiences. Ability to work independently with initiative or as part of a collaborative team to achieve organizational goals.
• Organizational and Time Management: Exceptional organizational skills with the ability to manage multiple tasks, prioritize workloads, and meet deadlines in a fast-paced environment. Project management experience is a plus, ensuring efficient follow-up and execution of security initiatives.

Desired Skills

• Project Management: Ability to organize time effectively and manage multiple security-related projects simultaneously, ensuring timely completion and follow-up.
• Stakeholder Engagement: Skill in communicating technical information to non-technical stakeholders, fostering a shared understanding of security risks and mitigation strategies.