About the job

The Information Security Specialist, part of the Information Security team in the IT Department, is responsible for supporting the team in protecting computer assets by establishing and enforcing system access controls, providing security incident response, conducting security awareness activities, and maintaining disaster preparedness.

This position will significantly enhance the InfoSec team’s ability to proactively address evolving security threats and protect the organization’s ICT infrastructure and information assets. With the addition of this role, the team will have the capacity to strengthen security operations, improve monitoring capabilities, and effectively implement security measures for both ongoing and upcoming projects, including those involving cloud technologies and new services.

This role will enable the team to deliver projects on time, enhance current security controls, and respond swiftly to incidents, minimizing potential risks to the organization. It will also alleviate the workload on existing team members, fostering a more balanced and collaborative work environment.

Job Responsibilities

• Support the Information Security Manager and the Information Security team with daily tasks, including but not limited to incident response, investigations, project management, assurance tasks, and reporting responsibilities.
• Ensure authorized access by investigating improper access attempts and reporting violations.
• Create concise and comprehensive reports on security violations, including recommendations for addressing identified control weaknesses.
• Conduct system and process audits methodically to verify compliance with adopted processes, policies, and standards.
• Advocate for security awareness, stay up-to-date with cybersecurity trends, and incorporate best practices into daily work.
• Protect systems by defining access privileges, control structures, and resources.
• Assist in the development and implementation of AUS’ IT Disaster Recovery/Business Continuity plan, and maintain disaster recovery documentation, policies, and protocols.
• Implement security improvements by assessing the current situation, evaluating trends, and anticipating future requirements.
• Provide thought leadership within the Information Security and IT teams to help implement or enhance existing information security controls.
• Maintain technical knowledge by attending educational workshops and reviewing relevant publications.
• Ensure industry-standard practices are followed across various IT areas, such as network security, server security, application security, end device security, and forensic investigations.