Information Technology Security Specialist

.Job Description
1.Governance, Risk & Compliance (GRC)
Ensure compliance with IM8, WOG Cybersecurity Policies, and other government security standards.
Lead security risk assessments, gap analyses, and mitigation planning for systems and projects.
Develop and maintain security documentation including SRM reports, policies, procedures, and system security plans.
Support accreditation and certification processes such as STS, SCD, and annual security reviews.
2. Security Operations & Monitoring
Oversee security events, incident alerts, and vulnerabilities across systems.
Coordinate with Government Security Operations Centres (SOC) or vendor SOC for incident triage and escalation.
Track remediation of findings from audits, penetration tests, and vulnerability scans.
Ensure timely reporting of incidents to relevant government cybersecurity authorities.
3. Project Security Assurance
Participate in system design reviews to ensure security-by-design principl...