Information Security Officer (InfoSec)

The Information Security Officer (ISO) will be responsible for maintaining the security posture of scientific IT endpoints, responding to security incidents, and ensuring compliance with IT security policies and standards. The ISO will work closely with the departments to provide comprehensive support in various security operations.

Key Responsibilities:

• Perform security patching, hardening, and remediation for End user computing environments such as Windows OS, Mac OS, O365 and other standard desktop software and applications.
• Investigate and respond to security incidents and service requests related to end-user computing, including email phishing and analysis, coordinating mitigative measures and preparing official incident reports.
• Analyse advisories published by ITSS CERT and/or product manufacturers, perform risk assessments, and execute recommendations.
• Provide consultation, evaluation, and implementation of security controls, including cross-border travel evaluations and pre-emptive checks against IT security policies.
• Conduct briefings to reinforce cybersecurity hygiene practices, policy updates, and control implementation for new hires and existing staff.
• Evaluate and implement security tools, processes, and procedures, provide extended support for security applications, and handle software whitelisting requests.
• Responsible for evaluating risk statements based on security measures, providing recommendations on security strategies, assessing compliance with SOPs and guidelines, and conducting vulnerability checks to ensure effective risk mitigation.

Qualifications:

• Diploma in information technology, Computer Science, or related field.
• Minimum 3 years of hands-on desktop support experience supporting Windows and macOS operating systems.
• Experience with end point security related support, such as handling security incidents, email phishing and analysis, mitigative measures and preparing official incident reports.
• Professional certifications such as Microsoft certifications, CISSP, CISM, or equivalent is preferred.
• Experience in endpoint security, incident response, & IT security policy implementation.
• Familiarity with industry security standards and compliance requirements.
• Strong communication and presentation skills.
• This is a Fixed Term Contract position.