IT Security Officer

1.

Scope of Work The Information Technology Security Officer will support the Board's cybersecurity governance, assurance, and security management activities across security architecture, vulnerability assessment and penetration testing, risk assessment, system hardening, cloud security posture management, software clearance, firewall and network deviation management, cybersecurity policies and standards, and security metrics reporting.

The officer will coordinate security reviews and assessments, maintain cybersecurity registers and trackers, follow up on remediation and outstanding actions with relevant stakeholders, prepare security reports and management dashboards, and support the upkeep of cybersecurity policies, standards, specifications, and documentation.

This role requires strong coordination, analytical, documentation, and stakeholder management skills, with a good understanding of enterprise cybersecurity controls, risk management, and governance processes. 2.

Roles and Responsibilities

Security Architecture

• Assist in maintaining security architecture diagrams, records, and approved design documentation.

• Track security architecture review requests and coordinate inputs from project teams and relevant stakeholders.

• Maintain records of architecture decisions, recommendations, and approved designs.

• Support preparation of security advisory materials and architecture review documentation. Vulnerability Assessment & Penetration Testing

• Coordinate and schedule VAPT engagements with system owners, vendors, and security testers.

• Maintain the VAPT tracker and follow up on remediation of identified vulnerabilities.

• Coordinate re-testing activities and update finding closure status.

• Assist in preparing VAPT reports, summaries, and presentation materials. Risk Assessment

• Coordinate cybersecurity risk assessment exercises with system owners and stakeholders.

• Maintain the cybersecurity risk register and track risk treatment and remediation actions.