Manager / Information Technology (Infrastructure Security)

[What the role is] The Infrastructure Security Officer is responsible for supporting NParks' day-to-day infrastructure security operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and Azure/Dynamics environments.

Responsibilities

• The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security issues are identified, tracked, and remediated in a timely manner.
• The incumbent will play an operational role in maintaining the organisation's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infrastructure processes and controls. [What you will be working on] 1 .
• Vulnerability Management Manage the end-to-end vulnerability management process across on-premises infrastructure, servers, endpoints, applications, Azure/Dynamics/ESRI/SaaS environments from initial discovery through to final closure, to ensure that vulnerabilities are addressed within NParks' service levels.
• Support the onboarding of hardware, network, software assets for vulnerability monitoring, as well as the setup and daily operations of such systems.
• Support the setup, onboarding and daily management of privileged IDs within privileged identity management systems.
• Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
• Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
• Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
• Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
• Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
• Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.
• 2.
• Incident Response Support Working with the CISO (Chief Information Security Officer) and the Infrastructure Team, coordinate and drive the following activities during cybersecurity, data, or resilience incidents: Coordinate incident response activities in collaboration with stakeholders and affected parties, including identification, escalation, containment, recovery, post-incident review.
• Maintain accurate incident documentation.
• Drive post-incident reviews to identify lessons learnt and measures to prevent recurrence.
• Track incident trends and recommend operational improvements to enhance security effectiveness.
• Ensure incident management processes are executed in accordance with established security procedures and governance requirements.
• 3.
• DDoS and Web Application Firewall (WAF) Operations Manage the operations of the Content Delivery Network (CDN) service and its associated web application firewall which protects NParks' Internet-facing applications.
• Coordinate with service providers and stakeholders to ensure the effectiveness of deployed security controls.
• Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
• WAF policy reviews, rule updates, and change requests in accordance with operational needs.
• Initiate and manage investigations upon detecting abnormal or suspicious traffic.
• Track service issues and follow up with vendors to ensure timely resolution.
• Recommend operational improvements to enhance security effectiveness.
• 4.
• Security and Infrastructure Operations Coordination Coordinate infrastructure security operational activities across multiple stakeholders within and outside NParks.
• Maintain security risk, remediation, and compliance tracking registers.
• Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
• Support security governance activities through effective communication and collaboration with stakeholders.
• Escalate operational issues, delays, and security risks where required.
• Ensure infrastructure security processes are executed consistently and effectively.
• 5.
• Reporting and Compliance Monitoring Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
• Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
• Monitor compliance with prescribed security requirements, policies, and standards.
• Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
• Support management review meetings by providing timely and accurate cybersecurity status updates.
• Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.
• 6.
• Contract Management Manage contracts related to security and audit services. [What we are looking for] Areas of study in Infrastructure, Cybersecurity or related fields.

Requirements

• Minimum of two years' experience in vulnerability management and related operations.
• Experience working with vulnerability management platforms, such as Wiz, Tenable, TrendMicro, including setup, alert management and daily operations, or similar platforms.
• Experience in planning and implementing security alerts in Microsoft Azure environment.
• Experience in coordinating cybersecurity incidents and remediation activities.
• Experience in planning, implementing and optimising firewall rules for applications.
• Experience in implementing security policies and translating policy requirements into operational controls.
• Knowledge Strong technical knowledge of operating systems and associated utilities, scripting, networks and network devices, with the ability to develop solutions that meet security requirements in an infrastructure environment.
• Clear understanding of vulnerability management processes.
• Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.
• Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.
• Strong coordination and stakeholder management skills.
• Good analytical and problem-solving capabilities.
• Effective verbal and written communication skills.
• Ability to work independently and collaboratively within a team environment.
• Strong organizational skills with attention to detail.
• Ability to manage multiple tasks and priorities in a dynamic operational environment.

Preferred

• Certifications Microsoft Azure and/or Dynamics 365 Certifications Certifications related to vulnerability management tools.
• Relevant cybersecurity, infrastructure, or security operations certifications.
• Only shortlisted candidates will be notified.
• Successful candidate will be employed on 2-year contract.