IT Security Specialist

Location: Lagos
Employment Type: Full-time

Description

• The IT Security Specialist is responsible for implementing, monitoring, maintaining, and continuously improving the organization's information and technology security controls to protect its systems, networks, applications, infrastructure, data, and digital assets from cyber threats.
• The role supports the development and enforcement of security policies, standards, procedures, and controls, while proactively identifying vulnerabilities, monitoring security events, investigating incidents, and coordinating appropriate responses to security threats.

Duties & Responsibilities

• Monitor the organization's IT environment for security threats, vulnerabilities, suspicious activities, and unauthorized access.
• Implement and maintain information security controls across servers, networks, endpoints, applications, databases, cloud environments, and other technology platforms.
• Conduct periodic vulnerability assessments across IT infrastructure, applications, endpoints, and network environments.
• Identify, assess, prioritize, and track remediation of security vulnerabilities.
• Participate in the detection, investigation, containment, eradication, and recovery of cybersecurity incidents.
• Analyze security alerts, logs, system events, and other relevant information to determine the nature and impact of security incidents.
• Monitor and review user access to critical systems and technology resources.
• Monitor security events and alerts generated by SIEM, EDR, firewall, IDS/IPS, antivirus, and other security technologies.
• Support periodic information security risk assessments and technology control reviews.
• Conduct security reviews of systems, applications, infrastructure, vendors, and technology projects
• Participate in technology projects to ensure that security requirements are considered from design through implementation.
• Support the development, review, and implementation of information security policies, standards, guidelines, and procedures.
• Support security assessments of technology vendors, service providers, and third-party partners.
• Maintain accurate documentation of security incidents, vulnerabilities, risks, assessments, access reviews, and remediation activities.
• Prepare periodic IT security reports for management.
• Develop dashboards and metrics covering security incidents, vulnerabilities, patching, access violations, security alerts, and compliance.
• Maintain evidence of security control implementation and monitoring.
• Provide timely security status updates and escalate significant risks to management.

Job Requirements

• Qualifications: First Degree (2:1 or upper credit) in Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, Computer Engineering, or a related discipline.
• A Master's degree in Cybersecurity, Information Security, IT, or a related field is an added advantage
• Others: Minimum of 3–5 years' relevant experience in IT security, cybersecurity, information security, network security, infrastructure security, or a related field.
• Experience: Minimum of 5 years post NYSC experience
• Experience in security monitoring, vulnerability management, incident response, access management, and security assessment is preferred.

Application Closing Date
Not Specified.

Interested and qualified candidates should send their CV to: ademuyiwa.adetunji@up-ng.com using the job title as the subject of the mail.