Investigate malicious web traffic and persistent attacks, improve threat-detection mechanisms, and support customers with timely incident response and clear reporting.
IT Security Officer
📜 Description
- Monitor networks for security breaches and investigate incidents.
- Maintain firewalls, encryption software, and other tools that protect sensitive information.
- Identify vulnerabilities in computer and network systems and research emerging security trends.
- Prepare reports on security metrics, attempted attacks, and breaches.
- Develop security standards and best practices, and recommend enhancements to management or senior IT staff.
- Help users install and learn security products and procedures, and support SOC 2 certifications.
🛠️ Requirements
- Experience in risk, compliance and information security policy development.
- Excellent organizational and communication skills (both oral and written).
- Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
- Knowledge of IT processes and controls and strong understanding of risk and control frameworks such as (CoBIT, ISO, NIST, ITIL, PCI).
- General knowledge of information security regulatory requirements and standards such as ISO 27001/2
Full job description
Responsibilities
- Monitor organization’s networks for security breaches and investigate when one occurs
- Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information
- Check for vulnerabilities in computer and network systems
- Research the latest information technology (IT) security trends
- Prepare reports that document general metrics, attempted attacks, and security breaches
- Develop security standards and best practices for their organization
- Recommend security enhancements to management or senior IT staff
- Help computer users when they need to install or learn about new security products and procedures
- Help in SOC 2 Certifications
Requirements
Requirements and skills
- Experience in risk, compliance and information security policy development.
- Excellent organizational and communication skills (both oral and written).
- Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
- Knowledge of IT processes and controls and strong understanding of risk and control frameworks such as (CoBIT, ISO, NIST, ITIL, PCI).
- General knowledge of information security regulatory requirements and standards such as ISO 27001/2
Similar jobs
Search more Cybersecurity Analyst jobsAnalista de Segurança Cibernética | Foco em EDR, SIEM e Resposta a Incidente
Monitora e fortalece a segurança da informação, identificando vulnerabilidades, tratando incidentes e aprimorando controles, processos e práticas de segurança em colaboração com equipes e áreas da empresa.
Execute DoD RMF authorization and continuous monitoring for IL4/IL5 systems, maintaining assessor-ready eMASS packages and translating security requirements into actionable guidance for cloud engineering teams.
Manage vulnerability, endpoint, cloud, vendor-risk, and data-loss prevention security operations, advising technical teams on remediation and building reports and automation to strengthen Harvard Medical School’s infrastructure.
Investigate Microsoft Defender alerts and endpoint threats, troubleshoot protection and sensor issues, support incident containment and remediation, and maintain security compliance across enterprise environments.
