IT Security & IT Governance Officer

1. IT Security Operations

• Monitor and implement IT Security taks: UAM review, Access Management, Review Contract, License management, OneTrust, Finding.

• Perform daily review of security logs and coordinate investigation of suspicious activities.

• Manage User Access Lifecycle: creation, modification, deactivation, and periodic access reconciliation.

• Review and approve system access requests (e.g., PAM, internal applications) based on security matrices.

2. IT Governance & Compliance

• Manage and monitor Qualys vulnerability scanning platform, ensuring timely scanning, assessment, classification, and reporting of discovered vulnerabilities.

• Coordinate vulnerability remediation with IT Infrastructure and Application teams; track progress and follow up until closure.

• Support internal/external audits and ensure adherence to regulatory and governance frameworks.

• Ensure compliance with Personal Data Protection regulations and internal privacy policies.

Vulnerability & Risk Management

• Operate and monitor Qualys or similar platforms for vulnerability scanning and reporting.

• Track remediation progress with IT teams; escalate critical vulnerabilities when needed.

• Support patch management compliance and baseline security checks.

3. User Support & Security Awareness

• Conduct security training for new joiners and raise awareness on phishing and email security.

• Guide users on safe system usage and security best practices.

1. Qualifications & Experience

• Professional requirements: Proficiency in Linux, Nutanix administration, Commvault, and Qualys; ability to perform patch upgrades for both Windows and Linux.

•  At least 3 yeear of experience in IT Security Operations, Governance, Compliance, Personal Data Protection, preferably in banking/finance.

• Knowledge of vulnerability management tools (e.g., Qualys) and access control principles.

• Understanding of Personal Data Protection regulations.

2.Skills

• Strong analytical, detail-oriented, and process-driven mindset.

• Excellent written and spoken English communication skills, especially in technical documentation and user coordination.

• Ability to collaborate across teams and work independently under compliance-driven environments.

• Relevant certifications: Security+, CEH, ISO 27001, or Privacy certifications (CIPP/E, CIPM) are an advantage.