Total 658 computer security job vacancies in Legal / Public / Security category in Hong Kong

• Strong hands on technical skills
• Regional role
• People centric environment and value talents

about the company
My client is looking for a Senior Executive, IT Security & Compliance who will play a key role within the team to helpshape their cybersecurity operations.

about the job

• Serve as the Global ISMS Management Representative, owning the ISO/IEC 27001 lifecycle and evolving our governance framework.
• Provide hands-on technical and operational oversight for SIEM, EDR, and DLP stacks to pre-emptively neutralize risks.
• Act as the primary security lead for enterprise clients, ensuring PDPA compliance and managing high-stakes security questionnaires.
• Lead Proof-of-Concept (PoC) activities to validate new security technologies from a risk perspective.
• Coordinate security incident response activities, including tabletop exercises, classification, escalation, and post-incident reviews.
• Monitor emerging threats to ensure detection capabilities evolve. Identify gaps and evaluate new security technologies (e.g., SSE, PAM, Vulnerability Management) from a risk perspective.
• Coordinate periodic vulnerability scans and penetration testing, ensuring successful remediation and retesting.

skills and experience required
Minimum 5 years of experience and a proven track record in managing information security, specifically covering both governance and operational security.

Proven experience serving as an ISO 27001 ISMS representative and coordinating SOC 1/SOC 2 audits.

Strong understanding of cloud security (AWS/Alibaba Cloud preferred), encryption, IAM, network security, and endpoint protection.

Ability to interpret SIEM alerts, EDR findings, cloud security logs, and vulnerability results. 

Preferred certifications include CISSP, CISM, CCSP, or ISO 27001 Lead Implementer/Auditor.

Whats and offer
The permanent opportunity for an Senior Executive, IT Security & Compliance, will pay a salary range of $ 7,000 - $ 9,000 plus benefits. 

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

• Access control and visitor logging.
• Regular patrolling of premises.
• CCTV monitoring and alarm response.
• Professional customer service.
• Requirements: GCE 'N' Level or equivalent, valid PRD License
• Attractive salary & medical package; annual increment, AWS, performance bonus, full CPF, allowances, annual leave.
• Singaporean only.

Job Description:

• Conducting patrols and monitoring duties.
• Managing access control (e.g., preventing unauthorized access to the premises).
• Assisting staff and members of the public with inquiries.
• Responding to emergency alerts.
• Addressing other security-related issues.

Requirements:

• No experience required as training will be provided.
• Able to perform 12 hours shifts ( you may indicate preference on morning/evening shift).
• Security cert is not required for application. Course will be sponsored.

Interested candidates who wish to apply for the advertised position, please click on “Apply Now” or WhatsApp us at 89098083 for quicker respond.

We regret that only shortlisted candidates will be notified.

EA License No: 24C2083 ( Chief Recruit Pte Ltd)

EA Registration No. R24120525 (Lim Chun Jie)

By submitting your personal information and resume (CV) to us, you grant permission to Chief Recruit Pte Ltd and its associated entities to collect, process, and share your personal data for the purposes outlined in the Privacy Policy, which can be accessed at https://chiefrecruit.com/privacy-policy. You confirm that you have reviewed, understood, and accepted the terms of the Privacy Policy.

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

About the Role
We are seeking an experienced Vulnerability Management Specialist to join the Data Security Services team within an international IT Production Centre. This role focuses on managing vulnerability management processes across infrastructure supporting multiple regions, including Europe and Asia.

You will play a key role in identifying, assessing, and coordinating remediation of vulnerabilities, working closely with cross-functional teams to strengthen the organisation’s security posture in a dynamic operational environment.

Key Responsibilities

• Develop and execute the Vulnerability Management plan across all lifecycle phases
• Schedule, configure, and monitor vulnerability scans, ensuring timely execution and issue resolution
• Perform asset discovery and ensure accurate onboarding into vulnerability management tools
• Assess vulnerabilities, analyse risk exposure, and prioritise remediation actions based on impact
• Collaborate with infrastructure and application teams to drive remediation efforts
• Analyse false positives and facilitate risk acceptance processes with relevant stakeholders
• Maintain dashboards and provide regular reporting to technical teams and management
• Track and ensure compliance with defined KPIs and service levels
• Lead remediation planning for penetration testing findings
• Conduct threat exposure assessments and coordinate response actions
• Engage with stakeholders across regions to ensure alignment and effective communication
• Propose and implement continuous service improvement initiatives
• Stay updated on emerging threats and vulnerabilities and assess their relevance to the environment
• Ensure compliance with internal policies, regulatory requirements, and security standards

Requirements

• 8–10 years of IT experience, including at least 4–7 years in IT Security
• Minimum 4 years of hands-on experience in enterprise-level vulnerability management
• Strong technical knowledge of vulnerabilities across operating systems, networks, databases, and applications
• Experience in prioritising and coordinating remediation using a risk-based approach
• Proven ability to work with cross-functional teams in an IT operations environment
• Hands-on experience with vulnerability management tools such as Tenable (e.g. Nessus, SecurityCenter)
• Strong analytical, problem-solving, and documentation skills
• Ability to manage multiple priorities in a fast-paced environment
• Familiarity with ITIL processes and working in structured, process-driven environments
• Effective communication and stakeholder management skills

Technical & Reporting Skills

• Experience in creating dashboards and reports using tools such as Excel, PowerPoint, or Word
• Familiarity with business intelligence tools (e.g. Power BI) for reporting and visualisation
• Ability to present technical findings clearly to both technical and non-technical stakeholders

Preferred Qualifications

• Professional certifications such as CISSP, GIAC Enterprise Vulnerability Assessor (GEVA), CREST, or equivalent
• Experience within financial services or regulated environments
• Broad understanding of information security domains (e.g. endpoint security, encryption, data protection)

Work Environment & Culture

• Collaborative, multicultural, and international working environment
• Exposure to large-scale, enterprise-level infrastructure and security operations
• Opportunities to work with global teams across multiple time zones
• Emphasis on continuous learning, process improvement, and operational excellence
  
  EA Number: 11C4879

About The Company

We have partnered with one of the leading retail groups in Singapore with a strong presence across multiple store formats islandwide. With a portfolio of well-established brands, the business continues to grow and adapt, serving diverse customer segments though its network of over 50 outlets.

Job Summary

The successful candidate will be responsible for implementing, maintaining, and enhancing our organisation’s information security posture. This role requires strong technical expertise and the ability to collaborate closely with cross-functional teams, including End User Support, Network, IT Infrastructure and Application, to ensure security is embedded across all systems and processes.

This role is based in Tampines North.

Key Responsibilities

• Analyse security threats, develop and optimise security policies.
• Proactively detect, investigate, and respond to cyber threats within the M365 ecosystem, which includes email, Teams, SharePoint and OneDrive.
• Collaborate with IT Infrastructure and Network teams to ensure secure configuration of servers, networks and cloud environments.
• Partner with End User Support team to improve endpoint security, user awareness and access controls.
• Monitor, investigate and respond to security incidents, escalating where necessary.
• Perform regular vulnerability assessments, recommending and following up on remediation actions.
• Develop and maintain security documentation, including standards, procedures and technical guidelines.
• Assist in compliance with security frameworks, regulations and industry best practices (e.g., ISO 27001, NIST).
• Continuously evaluate emerging threats and recommend new tools, technologies and processes to mitigate risks.
• Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules.

Qualifications

• 3–5 years of hands-on experience in IT security operations.
• Certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity, or GIAC
• Additional certifications like CISM or CSSP are considered a plus
• Good analytical and problem-solving skills to investigate and resolve security vulnerabilities effectively.
• Excellent written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders.
• Knowledge of cybersecurity threats, vulnerabilities, and exploit methods.
• Familiarity with cloud computing platforms and related security considerations (GCP, Azure, AWS).
• Experience in security configurations, patch management, certification management, firmware updates, firewall rule management, and endpoint security agent administration.
• Ability to work collaboratively in a fast-paced environment while maintaining the confidentiality, integrity, and availability of information assets.
• Hands-on experience with security tools such as SIEM, EDR, XDR, UEBA, and SOAR.
• Knowledge of the MITRE ATT&CK framework will be added advantage.
• Familiarity with ISO27001 standards will be added advantage.
• Understanding of Zero Trust architecture will be added advantage.

• Permanent full-time role
• Basic $2870 to $3600 + Allowances + JOINING BONUS
• Training Provided

Job Description:

• Responding to incidents and managing security and safety systems.
• Preventing unauthorized entry into premises.
• Monitoring CCTV for suspicious activity.
• Conducting patrols and clocking duties.
• Performing access control duties.

Requirements:

• Able to commit 12 hours duty (Permanent day and/or night shift available)

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

Barry Ang Ze Xin (Reg No : R26159529)

EA Recruitment Pte Ltd

EA License No: 21C0492

Job Description:

• Conducting patrols and monitoring duties.
• Managing access control (e.g., preventing unauthorized access to the premises).
• Assisting staff and members of the public with inquiries.
• Responding to emergency alerts.
• Addressing other security-related issues.

Requirements:

• No experience required as training will be provided.
• Able to perform 12 hours shifts ( you may indicate preference on morning/evening shift).
• Security cert is not required for application. Course will be sponsored.

Interested candidates who wish to apply for the advertised position, please click on “Apply Now” or WhatsApp us at 89098083 for quicker respond.

We regret that only shortlisted candidates will be notified.

EA License No: 24C2083 ( Chief Recruit Pte Ltd)

EA Registration No. R24120525 (Lim Chun Jie)

By submitting your personal information and resume (CV) to us, you grant permission to Chief Recruit Pte Ltd and its associated entities to collect, process, and share your personal data for the purposes outlined in the Privacy Policy, which can be accessed at https://chiefrecruit.com/privacy-policy. You confirm that you have reviewed, understood, and accepted the terms of the Privacy Policy.

• Location: Office at Outram Road | Site will be Islandwide
• Working Hours: Mon to Fri [830am – 6pm] Willing to commit to rotational standby duties for activations outside working hours
• Salary: Basic up to $3500 + Transport $750 (car) or $400 (motorbike) or by reimbursement basis + HP by reimbursement basis

Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.

The Supreme HR Advisory Pte. Ltd || 14C7279

Chua Jie Ying (Cai Jie Ying), Evelynn || EA Personnel License R24120580

Lead Technical Manager

• Working Days & Hours: Monday to Friday, 8.30am to 6pm. Willing to commit for work outside working hours, if required.

• Location: Tiong Bahru, Commonwealth, Redhill Office at Outram Road

• Salary Range: basic up to $7000; transport 750 (car) or 400 (motorbike) or by reimbursement basis; HP by reimbursement basis

• Minimum 6 years related experience

• Diploma or Degree in Electrical / Mechanical Engineering/Computer Science or its equivalents

• Experience in the Security and CCTV industry and exposure to products and operations will be an added advantage

Interested applicants can also send your resume to (Liwenpoh741#gmail.com) and allow our consultant to match you with our clients. No Charges will be incurred by Candidates for any service rendered.

WA ME 9735 4019 for more Lead Technical Manager role

Job Summary:

• The Lead Technical Manager will be responsible for managing a group of Technical Officer for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Job Responsibilities:

• Oversee the whole process of service cum maintenance workflow.

• Front line contact with client representatives on all service/maintenance related issues.

• Lead a team of service team members.

• Prepare service scope and develop service plans, define resource loading, skill requirements, tracking milestones and metrics.

• Determine new, creative ways to employ teams on service deliveries and distribute responsibilities.

• Manage day-to-day client interactions and expectations for optimal results

• Continually seek and capitalize upon opportunities to increase customer satisfaction and deepen client relationships.

• Possess a knowledge base of each client's business, organization and objectives.

• Be responsible for operationally managing multiple aspects of the team.

• Must be a team player.

• Ensure smooth progress and timely delivery and completion of maintenance commitments to clients

• Perform a wide variety of technical and non-technical tasks.

• Enhance current documentation of all infrastructure components and operation processes.

• Track and identify the new opportunities to improve our methodology and training offerings.

• Build technical relationship with prospects or existing/new customers.

• Sets targets, implements guidelines, and assists with any issues the team member may have.

• Communicates effectively with clients to identify needs and evaluate alternative technical solutions and strategies.

• Handle customer complains.

• Participate in all programs and enforces all policies relating to performance evaluations and career development planning.

• All other duties as assigned by management.

POH LI WEN REG NO: R25136683

THE SUPREMEHR ADVISORY PTE LTD EA NO: 14C7279

Job Scope include but not limited to:

• Support cybersecurity compliance assessment
• Support day-to-day cybersecurity enforcement & governance
• Support cybersecurity project rollout.
• Support cybersecurity operational work 24x7
• Support cybersecurity policy review for Firewall Rules, User Access Matrixes, System Configuration
• Support and Escalation of Security monitoring Alert and Remediation
• Support Audit Logs review from respective Log Source and SIEM system
• Support Regular Audits and Audit Review
• Conduct and Support VA and VAPT
• Contribute to the development of cyber incident response (IR) framework and plans.
• Support Cyber Incident Response Team to provide Level 2 or 3 incident support on a 24x7 on-call basis, when necessary.

Experience required:

• At least 3 years of progressive work experience in Cyber Security or Information Security
• Strong knowledge of common cyber security management frameworks, such as ISO and NIST
• Hands on understanding of the current cyber threat landscape, attack methodologies, and risk mitigation and remediation methods
• Strong experience in execution, tracking and progress reporting.
• Experience with incident response management
• Essential knowledge for Splunk, Splunk ES and PAM tools hands-on for at least 2 years
• Experience with systems administration a plus

Minimum Qualification / Certification:

• At least a Master/Bachelor's degree in IT/Engineering related discipline or equivalent experience
• Preferably with ECIH / GCIH certifications or equivalent

To apply please click the Apply button or send us your updated profile to recruit@percept-solutions.com

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is undergoing a growth phase and are on the lookout for talent. Applicants are encouraged to follow Percept Solutions on LinkedIn @ https://www.linkedin.com/company/percept-solutions/ to stay up to date on our upcoming roles and events.

About Akkodis

Akkodis is a global leader in engineering and R&D, leveraging connected data and deep technical expertise to accelerate innovation and digital transformation. With over 50,000 engineers and digital specialists across 30 countries in North America, EMEA, and APAC, Akkodis supports clients across the full innovation lifecycle—from concept and engineering to deployment and operations.

Its capabilities span mobility, software and technology services, robotics, testing and simulation, data security, AI, and analytics. Akkodis is part of the Adecco Group, bringing together the strengths of AKKA and Modis.

Job Summary

We are seeking a Cybersecurity SOC Engineer with strong hands-on experience in infrastructure and security operations within complex, multi-vendor enterprise environments. This role requires a proactive individual who can operate effectively in evolving and partially structured environments while maintaining high standards in security operations, troubleshooting, and system validation.

Experience Requirements

• 5–8 years of relevant experience in infrastructure, cybersecurity operations, or system integration
• Proven experience working in complex, multi-vendor enterprise environments
• Ability to work effectively in dynamic environments with evolving processes

Key Technical Skills

Core Infrastructure & Security

• Hands-on experience with:Firewalls (e.g., Check Point or equivalent)SIEM platforms (e.g., LogRhythm or similar)Endpoint security solutions (e.g., Symantec or equivalent)Network Access Control tools (e.g., Aruba ClearPass or similar)
• Strong understanding of:Networking fundamentals (TCP/IP, routing, switching, VPNs)Security operations and incident response workflows

Systems & Operations

• Experience in Linux/Unix environments
• Strong troubleshooting capabilities across system and network/security issues
• Familiarity with:Ticketing tools (e.g., JIRA, ServiceNow)Log monitoring and analysis tools

Key Functional Competencies

• Strong troubleshooting and root cause analysis (RCA) mindset
• Ability to quickly learn and adapt across multiple technologies
• Comfortable working in documentation-heavy environments (e.g., test reports, RCA, compliance documentation)
• Effective stakeholder management across multiple teams and approval layers
• High sense of ownership and accountability, especially in ambiguous situations

Ideal Candidate Profile

• Resilient and adaptable in fast-paced, high-demand environments
• Able to balance operational responsibilities, testing activities, and documentation requirements
• Works independently with minimal supervision while collaborating effectively with cross-functional teams
• Demonstrates a pragmatic, solution-oriented mindset with the ability to prioritise and execute under imperfect conditions.

Don't miss out on this chance to be a part of a dynamic and growing team. Take the Next Step in your career journey with us!

• To apply, please submit your updated resume along with your notice period. [ We are looking for someone to start ASAP]
• Click on the 'Apply here' button to drop your resume directly or email it to susmita.SAHU@akkodis.com
• Our team will review all applications and contact shortlisted candidates for further steps in the selection process.

• Hands-on ownership of Azure AD/Entra ID Security and O365 Conditional Access design and implementation.
• End-to-end ownership of cloud and infrastructure security as part of a holistic infrastructure operating model.
• Owned cloud and infrastructure security as a core component of the end-to-end infrastructure operating model to ensure seamless security integration.

about the company
We need a potential infrastructure leader who builds security into the very DNA of our systems.

We are looking for a Senior Infra Security Engineer who "owns" the environment. You aren't just managing tools; you are designing and implementing the secure foundation of our global infrastructure.

about the job

• Take full ownership of the infrastructure security lifecycle from initial architectural design and "shift-left" deployment to day-to-day operational excellence.
• This is not a "support" task. You will lead the design and hands-on implementation of our Azure AD / Entra ID ecosystem, including complex O365 Conditional Access policies and IAM frameworks.
• Build and secure scalable Azure and AWS environments, ensuring every VNET, Firewall, and PaaS service is hardened against modern threats while optimized for cost and performance.
• Drive the transition to a modern operating model by automating security controls using Terraform or similar tooling, ensuring compliance is "baked in" by default.
• Beyond prevention, you will own the technical execution of Disaster Recovery and Business Continuity plans, ensuring our global operations remain uninterrupted.

skills and experience required
At least 8+ years of experience, but more importantly, a track record of owning infrastructure. You can describe the "why" and "how" behind the systems you’ve built.

Hands-on expert in Microsoft Azure/AWS, with specific, demonstrable experience in securing Entra ID (Azure AD) and designing sophisticated Conditional Access workflows.

Understand how a firewall change affects the application layer and how an IAM policy impacts the developer workflow.

You can bridge the gap between high-level roadmaps and low-level configuration, communicating effectively with both the C-suite and the engineering team.

whats an offer
The permanent opportunity for a Senior Infrastructure Security Engineer, will pay a salary range of $ 8,500 - $ 9,800 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Main Duties and Responsibilities:

1. Solution Consulting and Architecture

•Design and articulate end-to-end cybersecurity solutions, including products and security services aligned with NIST Cybersecurity Framework (CSF) and industry best practices.

•Conduct in-depth security assessment of systems, network, infrastructure and applications to identify misconfigurations, vulnerabilities, potential attack vector and security posture maturity level aligning to NIST CSF.

•Design and recommend security controls and architecture improvements to ensure security is embedded into the design phase of all technology initiatives.

•Act as a security advisor throughout the system development lifecycle (SDLC), participating in design reviews, threat modeling sessions, and change management processes.

•Lead technical discussions, conduct workshops, and proof-of-concept (POC) activities.

2. Technical Sales Enablement

•Partner with Sales team to provide technical expertise, guidance on security requirements to close deals.

•Support sales and business development efforts by delivering product demonstrations, presentations for technical and executive audiences, and provide responses to RFP/RFI.

•Engage with prospective customers to understand business and technical requirements.

•Engage with customers to address cybersecurity queries, share best practices, and support compliance efforts.

•Develop and maintain up-to-date technical sales collateral including solution briefs, architecture diagrams, and other documents.

3. Collaboration and Leadership

•Collaborate with product, engineering, and delivery teams to align on technical feasibility, integration strategies, and service capabilities.

•Act as a bridge between sales and technical teams to ensure seamless solution deployment and customer satisfaction.

• Mentor junior analysts and contribute to the development of security best practices.

•Collaborate with external auditors, regulators, and customers during assessments and reviews.

• Participate in incident response, threat hunting and cybersecurity exercises as needed.

Job Requirements: (e.g., educational/ professional qualifications)

•Min. 5 years of experience in Information Security areas.

•Degree in Information Technology, Cybersecurity, or related field.

•Proficient in both English and Mandarin as you will need to work closely with Chinese counterparts.

•Strong communication and interpersonal skills

•Expertise in security frameworks, technology risk, defensive strategies, endpoint security, IAM, PAM, SIEM, SOAR, SOC Operations, DLP, ASM, Application & Network security.

•Familiarity with vulnerability management, and security configuration and automation.

• Digital Forensics and Incident Response (DFIR) experience enabling deeper investigations and root cause analysis is an added advantage.

• Ability to analyze security issues and recommend effective solutions.

•Relevant certifications such as CISM, CISSP, ISO/IEC 27001 or vendor/industry certifications are an added advantage.

We are seeking a strategic yet hands-on Information Security Officer to join our growing cyber security function. This role bridges security governance with practical technical implementation ensuring that security requirements are translated into effective, real-world controls.

You will strengthen the organization’s security posture by designing, implementing and validating security controls aligned with regulatory, business and technology requirements. You will work closely with internal stakeholders across IT and business units and, where applicable, support client engagements as a trusted security advisor.

This role focusses primarily on technical security implementation, control effectiveness, and risk reduction, rather than people management or purely policy-driven work.

Key Responsibilities

1.      Information Security Framework & Procedures

• Collaborate with Information Security (InfoSec) Department to interpret security policies and translate them into practical, organization-wide procedures.

• Design, document and maintain standardized security processes aligned with internal policies and external standards (e.g. ISO 27001, SS 714:2025).

• Ensure Security procedures are pragmatic, scalable, and adopted across business units.

• Continuously review and improve procedures to reflect changes in technology, risk landscape, and regulatory requirements.
  

2.      Security Review & Technical Assessment

• Assess gaps between current security practices and defined security benchmarks and drive hands-on improvements.

• Perform relevant security assessments such as configuration reviews, vulnerability assessments and control effectiveness reviews.

• Review and refine existing security and operational procedures to ensure effectiveness and scalability.

• Lead the implementation and rollout of new or updated security controls and procedures, ensuring smooth integration into existing technical and operational workflows.

• Validate that implemented controls meet policy and regulatory requirements, maintaining appropriate documentation for audit, assurance and continuous improvement purposes.
  

3.      Stakeholder Enablement & Advisory

• Act as the subject matter expert for information security across the organization and on client projects where applicable.

• Communicate security risks, trade-offs and recommendations clearly to both technical and non-technical stakeholders.

• Deliver targeted security awareness and training sessions to improve organizational cybersecurity maturity.

• Mentor and support process owners and system owners to ensure long-term ownership and sustainable execution of security controls.
  

4.      IT Collaboration & MIS Security Oversight

• Collaborate closely with IT, infrastructure, application and MIS teams.

• Periodically assess MIS-related systems, process, and data flows from an information security and risk perspective.

• Advise IT and MIS stakeholders on security control design, configuration hardening, and risk mitigation measures.

• Validate that MIS solutions and system implementations align with organizational security policies, approved architectures, and regulatory requirements.

• From time to time, support or assist with MIS-related tasks and initiatives where security input or technical understanding is required, particularly during system changes, reviews, or implementation.
  

Required Qualifications & Skills

Relevant Experience

• Demonstrated experience in information security, cybersecurity risk management, IT risk or IT audit, with hands-on involvement in implementation or validating security controls.

• Experience working in complex IT environments involving multiple systems, platforms, or regulatory requirements.

• Working experience with implementation and maintenance of solutions such as Microsoft Intune/Entra, Apple Business Manager, Wazuh is highly advantages.
  

Expertise

• Strong understanding of cybersecurity principles, security architectures, risk management concepts, and control frameworks.

• Practical experience applying security standards and frameworks such as ISO 27001 or equivalent.
  

Communication

• Ability to explain security concepts, risks, and requirements clearly to business leaders, technical teams, and cross-functional teams.

• Comfortable influencing without direct authority and working collaboratively across teams.
  

Certifications

• Security certifications such as CISA, CISM, CISSP or equivalent practical experience designing, implementing, and assessing security controls in real-world environments.
  

Analytical Mindset

• Strong ability to analyse complex environments, identify hidden security or compliance risks, and recommended pragmatic, risk-based solutions.

• Detail-oriented, with the ability to balance security rigor with business practicality.
  

What Success Looks Like in This Role

• Security policies are translated into controls and procedures that are consistently implement and understood across the organization.

• Security gaps are proactively identified, prioritized, and remediated.

• MIS and IT system demonstrate measurable improvement in security posture and audit readiness.

• Stakeholders view the Information Security Officer as a trusted advisor who enables secure and scalable business operations.