IT Security Officer

Key  Responsibilities: Security Architecture Assist in maintaining security architecture diagrams, records, and approved design documentation. Track security architecture review requests and coordinate inputs from project teams and relevant stakeholders. Maintain records of architecture decisions, recommendations, and approved designs. Support preparation of security advisory materials and architecture review documentation. Vulnerability Assessment & Penetration Testing Coordinate and schedule VAPT engagements with system owners, vendors, and security testers. Maintain VAPT records and follow up on remediation of identified vulnerabilities. Coordinate re-testing activities and update finding closure status. Assist in preparing VAPT reports, summaries, and presentation materials. Risk Assessment Coordinate cybersecurity risk assessment exercises with system owners and stakeholders. Maintain cybersecurity risk records and track risk treatment and remediation actions. Support preparation of risk reports and management review materials. Facilitate risk acceptance, exception, and approval processes in accordance with organizational requirements. Hardening Compliance Coordinate security hardening compliance assessments with system and infrastructure teams. Track hardening gaps and follow up on remediation progress. Maintain hardening compliance records, checklists, and trackers. Support preparation of periodic hardening compliance reports. Cloud Security Posture Management Monitor and triage findings generated by Cloud Security Posture Management tools. Track cloud security misconfigurations and follow up on remediation with system and cloud owners. Maintain CSPM findings and remediation status records. Prepare periodic cloud security posture reports and summaries. Software Clearance Receive, log, and track software security clearance requests. Coordinate with requestors and vendors to obtain required technical and security documentation. Maintain software clearance records and approval status. Support preparation of software security evaluation summaries and monitor expiring clearances. Firewall & Network Deviation Management Receive, track, and maintain firewall rule change and network security deviation requests. Follow up with requestors and network teams on outstanding actions and expiring deviations. Maintain deviation records and prepare review summaries for approval. Coordinate periodic firewall rule and network deviation reviews with relevant teams. Policy, Standards & Governance / Cyber Specifications Assist in drafting, reviewing, and updating cybersecurity policies, standards, guidelines, and procedures. Maintain the cybersecurity policy and standards documentation repository. Track document review cycles, approvals, and expiry dates. Support preparation and review of cybersecurity specifications for projects and procurement activities. Security Metrics & Reporting Collate and consolidate…