Cybersecurity Engineer - #1174162

The Cybersecurity Engineer supports the implementation, operation and continuous improvement of the organisation's cybersecurity programme. The role covers cybersecurity operations, governance, risk management, compliance monitoring, security awareness, incident response, vulnerability management, security assessments and project security activities.

Responsibilities

• Support cybersecurity operations, governance, risk management and compliance activities across the organisation.
• Monitor, investigate and respond to cybersecurity incidents, threats, vulnerabilities and security events.
• Conduct cybersecurity assessments, risk assessments, security testing and remediation tracking activities.
• Monitor and manage findings from security tools, cloud security platforms, vulnerability management systems and security operations services.
• Develop and deliver cybersecurity awareness programmes, phishing simulations, training sessions and communication campaigns.
• Support security-by-design and shift-left initiatives by providing cybersecurity advisory for projects, systems and cloud environments.
• Develop, review and maintain cybersecurity documentation, including security plans, risk assessments, procedures and reports.
• Prepare cybersecurity metrics, dashboards, management reports and compliance submissions.
• Collaborate with business stakeholders, project teams, system owners, vendors and technology partners to address cybersecurity risks and requirements.
• Participate in cybersecurity exercises, investigations, continuous improvement initiatives and operational security activities.

Requirements

• Degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.
• Relevant experience in cybersecurity, information security, IT security or a related field.
• Good understanding of cybersecurity principles, technologies, security operations, risk management and industry best practices.
• Familiarity with one or more cybersecurity domains, such as incident response, vulnerability management, cloud security, governance, compliance, risk management, security testing, security awareness or project security.
• Strong analytical, problem-solving, stakeholder management and communication skills.
• Ability to work independently and collaboratively in a dynamic environment.
• Relevant professional certifications such as CompTIA Security+, SSCP, CISSP, CISM, AWS Certified Security - Specialty, Microsoft security certifications, or equivalent, will be an advantage.