Vulnerability Management

• Assist in vulnerability scanning and assessments to identify weaknesses in the client’s environment
• Help prioritize and track remediation by severity and impact
• Work with internal teams to mitigate vulnerabilities on time
• Provide regular vulnerability reports and updates to the Senior IT Security Manager

Firewall Rules Review and Management

• Support periodic firewall rule reviews for proper access control and network segmentation
• Work with network and infrastructure teams to assess and adjust configurations
• Help ensure rules comply with internal policies and regulatory requirements

Audit Support

• Assist in preparing for and supporting internal and external security audits
• Provide documentation, logs and reports to auditors and respond to requests on time
• Track and resolve audit findings, ensuring corrective actions are implemented
• Support maintenance of audit trails for critical security events

Identity and Access Management (ID Validation)

• Assist with user identity validation and proper authentication mechanisms
• Support enforcement of access control policies so only authorized personnel access sensitive data and systems
• Help monitor and audit user access rights against role-based access control and least privilege principles

Security Awareness Training

• Assist in developing and delivering training programs for client employees and internal teams
• Help create materials on threats such as phishing and social engineering
• Track training progress and keep employees updated on best practices
• Support client-facing initiatives to promote a cybersecurity culture

Security Advisory Support

• Gather information on emerging threats and vulnerabilities
• Assist the Senior IT Security Manager with risk mitigation recommendations
• Maintain a repository of security advisories, updates and patches, and distribute them to stakeholders on time

Incident Response

• Support investigation and response to security incidents, gathering data and providing initial analysis
• Help escalate incidents and assist with documentation and resolution
• Participate in post-incident reviews to identify lessons learned

Risk Management and Compliance

• Help conduct risk assessments and recommend mitigation strategies
• Assist in keeping the client’s environment compliant with industry standards and regulations
• Contribute to maintaining security policies, procedures and controls

Collaboration and Communication

• Work closely with IT Security team members to implement and enforce policies and practices
• Communicate security status, risks and incidents to internal teams and client stakeholders
• Support preparation of reports, presentations and security briefings for senior management and clients

Continuous Learning and Improvement

• Stay current on cybersecurity trends, tools, vulnerabilities and attack techniques
• Participate in ongoing professional development
• Help identify and implement improvements to security processes, policies and tools

Qualifications

• Relevant certifications such as CISM, CISA, CompTIA Security+, CEH or equivalent (a plus)
• Minimum 2 years of experience in IT security, cybersecurity or a related field
• Hands-on experience or familiarity with vulnerability scanning tools, firewall rule configurations and identity management systems
• Experience or exposure to supporting security audits and compliance processes
• Familiarity with network security concepts, SIEM systems and basic incident response protocols (a plus)
• Understanding of IT security principles and best practices
• Basic knowledge of firewalls, antivirus software, IDS/IPS and SIEM systems
• Familiarity with frameworks such as NIST, ISO 27001 and CIS Controls
• Strong analytical and troubleshooting skills
• Ability to work in a team and manage tasks in a dynamic environment