Cyber Security Specialist

Role Summary

Security Governance & Risk

• Develop, implement, and maintain information security policies, standards, and procedures
• Conduct regular
• risk assessments
• , vulnerability assessments, and gap analysis
• Ensure compliance, local regulatory requirements, and internal policies
• Manage third-party/vendor security risk assessments

Security Operations

• Oversee day-to-day security operations including
• EDR, DLP, SIEM, Email Security Gateway, Firewalls, and NAC
• Monitor and respond to security incidents, coordinating investigation and remediation.
• Lead
• incident response
• , root cause analysis, and post-incident reporting
• Coordinate with SOC/MSSP providers and internal IT teams
• Direct and oversee the outsourced SOC, monitoring performance metrics, conducting regular service reviews, and ensuring strict adherence to Service Level Agreements (SLAs).
• Serve as the primary internal escalation point (Tier 3) for security incidents detected by the SOC, coordinating cross-functional threat containment, eradication, and Root Cause Analysis (RCA).
• Collaborate continuously with the MSSP to fine-tune detection use cases, SIEM correlation rules, and EDR policies to maximize alert fidelity and reduce false positives.

Identity, Access & Data Protection

• Enforce
• least privilege
• , access control, and identity management practices
• Review user access rights, privileged accounts, and role-based access
• Ensure data protection controls such as encryption, backups, and secure storage

Compliance, Audit & Documentation

• Prepare and maintain security documentation, risk registers, and incident reports
• Support internal and external audits and regulatory assessments
• Track remediation actions and ensure timely closure of audit findings

Awareness & Training

• Conduct regular
• cyber security awareness programs
• and phishing simulations
• Promote a strong security culture across the organization
• Provide guidance and support to employees on secure practices

Collaboration & Leadership

• Act as the primary security point of contact for business units
• Guide IT teams on secure system design and implementation

Required Experience & Education

• **Experience:**
• [3–5+] years of dedicated experience in Security Operations, GRC, or Security Architecture, with direct experience managing or coordinating with an outsourced SOC/MSSP.
• **Education:**
• Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent technical experience.

Required Technical Proficiencies

• **MSSP Management:**
• Proven ability to evaluate MSSP performance, manage SLAs, and translate external alerts into internal technical action.
• **Security Tooling:**
• Understanding of SIEM operations, EDR capabilities (e.g., Sentinel One, Defender), Email Security, and DLP solutions to effectively manage the infrastructure.
• **Networking:**
• Deep understanding of network protocols, Firewall administration, and Network Access Control (NAC).
• **IAM:**
• Active Directory, Entra ID (Azure AD), MFA implementation, and PAM lifecycle management.
• **Frameworks:**
• Familiarity with ISO 27001, NIST CSF, or CIS Controls.

Preferred Certifications