IT Security & Infra Management

B. Governance, Risk, and Compliance (GRC)

• Policy & Procedure Management
• Deploy, maintain, and periodically review IT policies and procedures.
• Modify policies based on business requirements or corporate IT recommendations.
• Audit & Documentation
• Prepare documentation for internal and external IT audits.
• Support audit processes and provide necessary evidence and responses.
• Compliance
• Ensure compliance with applicable standards (ISO 27001, GDPR, SOC 2, etc.).
• Conduct internal compliance checks and assist external auditors.
• Risk Management
• Perform periodic IT risk assessments.
• Identify security risks and recommend mitigation strategies to IT leadership.

C. Identity & Access Management

• User Lifecycle Management
• Handle user provisioning and de-provisioning in systems and applications.
• Implement and monitor role-based access control and MFA.
• Access Audits
• Periodically review user access rights.
• Address access anomalies and unauthorized permissions.

D. Security Awareness and Training

• Training & Awareness
• Conduct cybersecurity awareness sessions for all employees.
• Develop and distribute best practice guides and security communications.

Skills Required

Gdpr, Vulnerability Management, Mfa, Dlp, Endpoint Security, Siem Tools, Ips, Encryption, Iso 27001, EDR, Ids, Firewalls