Information Security Specialist

The Information Security Specialist will be responsible for monitoring, maintaining, and improving the organizations security posture. The role involves incident management and response, endpoint security, identity and access management, compliance with ISO 27001:2022, and support in employee awareness programs. The specialist will work closely with cross-functional teams to ensure security standards and policies are adhered to, while supporting Head of IT in day-to-day security operations.

Key Responsibilities

Incident Response & Security Operations

• Incident detection, investigation, containment, response, and recovery.
• Coordinate with teams for patch deployment and lifecycle management.
• Device management, control, and encryption.
• Monitor threats, alerts, suspicious activity, and data leakage attempts.
• Ensure antivirus definitions, compliance, and endpoint encryption.
• Detect and report unmanaged/rogue devices.
• Escalate critical security incidents to the appropriate team.

Vulnerability assessment & Patch Management

• Track and remediate vulnerabilities across endpoints and servers.
• Regular reviews of patch compliance and deployment status.

Identity & Access Management

• Active Directory user and group management.
• Configure and monitor MFA, SSO, and conditional access policies.

Compliance & Governance

• Maintain ISO 27001:2022 documentation (policies, procedures, risk registers, and audit logs).
• Support internal and external audits across departments. Track remediation plans and follow up with relevant stakeholders.
• Conduct periodic InfoSec awareness campaigns and employee training.
• Draft and circulate regular security advisories and reminders.
• Support basic monitoring and access control reviews.
• IT Asset Management throughout its lifecycle, support in procurement.

• Bachelors degree in computer science/information technology, or related field with a focus on Information Security.
• Minimum of 3 years of experience in Information Security and Compliance.
• Familiarity with ISO 27001:2022, SOC2, VAPT, GDPR, and DPDP Act.
• Certification like

  CompTIA A+ ,Network+ and CISM are preferred.

• Strong ability to learn and adapt to emerging technologies and software applications.