IT Security Officer

at  Ensign InfoSecurity

Ensign is hiring !
The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated and meticulous team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.
You will be the first line of defence in managing day-to-day security risks identified throughout a project’s System Development Lifecycle (SDLC). The role allows you to take on risk management and mitigation measures.

Roles & Responsibilities:

• Stay abreast of the current threat landscape and cyber security events
• Develop and deploy security hardening guidelines based on best practices
• Perform analysis of vulnerability results & work with principal vendor to ensure remediation
• Propose and enforce mitigation measures for failing security controls or vulnerabilities
• Work with Patch Manager and Engineers to ensure system patches are applied
• Manage vendor/business associate security assessments and VA/PT
• Develop security frameworks, policies and procedures that provide adequate information systems protection
• Educate project team on security framework, policies and procedures
• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation
• Maintain good operational security documentation

The ideal candidate should possess:

• Relevant diploma or degree qualifications in Information Technology or Cyber Security
• At least 4 years of IT or Cyber Security experience
• Professional certifications such as RHCE, MCSE, ISACA CISA, or ISC2 SSCP would be advantageous
• Experience in the administration and hardening the various operating systems such as Microsoft Windows or Linux
• Strong technical understanding of IT security controls
• Dynamic individual and team player with positive working attitude

• Stay abreast of the current threat landscape and cyber security events
• Develop and deploy security hardening guidelines based on best practices
• Perform analysis of vulnerability results & work with principal vendor to ensure remediation
• Propose and enforce mitigation measures for failing security controls or vulnerabilities
• Work with Patch Manager and Engineers to ensure system patches are applied
• Manage vendor/business associate security assessments and VA/PT
• Develop security frameworks, policies and procedures that provide adequate information systems protection
• Educate project team on security framework, policies and procedures
• Verify the effectiveness of security measures and to ensure all security measures will continue to be effective after implementation
• Maintain good operational security documentatio