IT Security Lead

This position is responsible for leading security governance, reporting, and process improvement, while providing technical oversight for incident response and complex security issues.

Responsibilities

• Lead the coordination and communication between the CSO, Internal IT, and other stakeholders to ensure the IT environment remains secure and compliant with current information security policies, processes, and standards
• Oversee the implementation, review, and continuous improvement of security controls and solutions in alignment with company Security Policy and best practices
• Take ownership of security reporting, including compiling, analyzing, and presenting regular security status updates and incident summaries to management
• Manage and track the progress of security-related tasks assigned by the CSO, ensuring timely completion and effective collaboration across teams
• Drive process improvements for incident response, vulnerability management, and compliance activities
• Support audits and compliance initiatives, ensuring all documentation and evidence are maintained and up to date
• Mentor and guide team members on security processes, best practices, and compliance requirements
• Serve as the technical lead for the Incident Response Team (IRT), investigating security threats and incidents, and recommending/implementing mitigation actions
• Provide hands-on support for complex technical issues related to security controls, system hardening, and vulnerability remediation
• Contribute to the evaluation and enhancement of security solutions, including reviewing configurations and recommending improvements

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field
• Minimum 2 years of hands-on experience in IT security, including:
  • System security configurations (infrastructure, websites, web applications)
  • Penetration testing and vulnerability assessment
  • Security monitoring, patching, and hardening
  • Compliance and audit support
• Strong knowledge of security principles, tools, and technologies
• Familiarity with cloud computing and cloud security architecture
• Solid understanding of firewall configuration, content filtering, network protocols, and IT system operations (Linux, Windows, virtualization)
• Experience with security standards such as ISO27001
• Excellent English communication skills (written and verbal), especially for reporting and documentation
• Strong analytical, problem-solving, and time management skills
• Ability to work independently and manage multiple priorities
• Relevant industry certifications (CISSP, CEH, CompTIA Security+) are an advantage