Cyber Security Specialist

Join our team and play a key role in maintaining EKFC's strong cybersecurity posture. The Cybersecurity Specialist will contribute to threat mitigation, risk management, and the protection of our digital assets, ensuring the security and resilience of our technology environment.

Key responsibilities:

• Conduct regular security and vulnerability assessments to identify and evaluate potential risks to information systems.
• Develop and implement effective incident response plans through established protocols to minimize damage and recovery time.
• Develop, implement, and enforce security policies, procedures and controls to protect the organization’s assets and ensure compliance with relevant regulations and standards (e.g., ISO27001, ISR, ICS and NESA).
• Monitor network traffic for suspicious activities for maintaining a secure environment and early threat detection
• Conduct security awareness training for employees to promote best practices for data security throughout the organization
• Conduct regular code reviews and penetration testing of various cybersecurity systems and applications for identifying vulnerabilities and improving software quality.
• Use security information and event management (SIEM) tools to provide a centralized view of security-related data and simplify monitoring and analysis.
• Prepare regular reports on security status and incidents for ongoing monitoring and review of compliance efforts.
• Collaborate with IT teams to secure infrastructure and applications tailored to the organization’s specific needs.
• Provide input on security implications for new projects or systems to ensure security considerations are integrated into the design and implementation phase.

Education Qualifications:

• Bachelor’s degree in computer science, Maths etc or equivalent
• Professional certifications in Cybersecurity (CompTIA Security+, Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+)

Work Experience:

• Minimum 5 years of IT Experience with extensive focus on IT Security covering IT Audit, IT Risk and Cybersecurity
• Must have worked in Information Security/Risk in a Global organisation with Complex/Hybrid IT Environment
• Strong knowledge of IT Infrastructure – both On Premise and Cloud, BYOD, Application development etc.
• Must have followed IT GRC Methodologies

Skills:

• Strong problem solving, analytical and time management skills
• Security Frameworks - ISO2700130000/CIS Critical security controls, NESA etc.
• Vulnerability Assessment and Penetration Testing (VAPT)
• IT Security/Cybersecurity
• ITSM and COBIT skills
• Strong interpersonal and communication skills.