IT Security Officer

**Job Title: IT Security Officer**

**About the Role**:
**At this role level, you will**:

- Oversee programmes and projects.
- Work with technical architects to translate the architectural designs into operations and support technical architects in operationalising the designs.
- Lead and direct infrastructure specialist teams in building, managing, supporting and maintaining solutions according to departmental policy.
- Monitor all operations and infrastructure. This could be something you do by yourself, or you could be leading a team — either way, your daily bread and butter involves going through alerts and logs (the computer security equivalent of video surveillance) in order to keep an eye on your organization’s digital Security.
- Maintain all security tools and technology. This could be a shared responsibility or the sole responsibility of the IT security Officer and their team.
- Monitor internal and external policy & regulation compliance. You want to ensure that both your vendors and employees understand your cybersecurity risk management policies and that they operate within that framework. The IT security officer is the living embodiment of policy, and while you may not always oversee enforcement, you are responsible for making sure things are in line internally.
- Work with different departments in the organization to reduce risk. From technical controls to policies (and everything in between), you’ll likely be tasked with working across the aisle of departments in your organization to get everyone on the same page.
- Implement new technology: You must evaluate it and help implement any controls that might mitigate the risk of its operation.
- Audit policies and controls continuously. Cybersecurity is a circular process, and as a officer, you must drive that process forward. This means regularly auditing the policies and controls you put into place. These audits will tell you if there’s anything you need to improve, remediate, or quickly fix. Having exposure into **ISO 27001 certification audit** added advantages.
- Ensure cybersecurity stays on the organizational radar. As an IT security officer, your job is to make the benefits clearly visible and champion all efforts going forward.
- Detail out the security incident response program. Every organization should have a well-defined and documented plan of action to put into place if a security incident does occur.

**Skills needed for this role level**:

- **Coding and scripting**: You can interact with and read code. You can write HTML and carry out baseline repair activities.
- **IT infrastructure**: You can lead teams and departments in the design, implementation, administration and support of infrastructure solutions and services.
- **Information security**: You can understand information security. You can design solutions and services with security controls embedded, specifically engineered with mitigation of security threats as a core feature.
- **Modern standards approach**: You can demonstrate a strong understanding of the most appropriate modern standards and practices, and how they are applied. You can coach and guide others in these standards.
- **Ownership and initiative**: You can take accountability for issues that occur and be proactive in searching for potential problems. You can achieve excellent user outcomes.
- **Problem management**: You can initiate and monitor actions to investigate patterns and trends to resolve problems. You can effectively consult specialists where required. You can determine the appropriate remedy and assist with its implementation. You can determine preventative measures.
- **Service focus**: You can take inputs and establish coherent frameworks that work.
- **Systems design**: You can design systems characterised by medium levels of risk, impact, and business or technical complexity. You can select appropriate design standards, methods, and tools, and ensure they are applied effectively. You can review the systems designs of others to ensure the selection of appropriate technology, efficient use of resources and integration of multiple systems and technology.
- **Systems integration**: You can establish standards and procedures across a service product life cycle, including the development product life cycle, and can ensure that practitioners adhere to these. You can manage resources to ensure that the systems integration function works effectively.
- **Technical understanding**. You can anticipate and advise on future technology changes that present opportunities for the product or programme.
- **Testing**: You can manage the planning of system and acceptance tests, co-ordinating both functional and non-functional specifications. You can provide authoritative advice and guidance on test planning. You can identify process improvements and contribute to the definition of best practice.
- **Troubleshooting and problem resolution**. You can use lateral thinking to break a problem down into its