Information Security Specialist - ICT and IT Security

About the Role

The Information Security Specialist will be an integral member of the IT Department's Information Security team, focusing on safeguarding the university's digital assets. Key responsibilities include enforcing access controls, responding to security incidents, promoting awareness, and managing disaster recovery plans. This role enhances the team’s capacity to proactively combat emerging security threats and supports various ongoing and future projects, including those involving cloud services.

Responsibilities

• Assist the Information Security Manager and team with daily operations such as incident handling, investigations, managing security projects, assurance checks, and reporting.
• Monitor and investigate unauthorized access attempts, ensuring compliance with access policies and reporting violations.
• Produce clear, detailed reports outlining security breaches with recommendations to address vulnerabilities.
• Conduct thorough audits of systems and procedures to confirm alignment with security policies and standards.
• Promote security awareness, keeping abreast of cybersecurity developments and integrating best practices into workflows.
• Define and manage access rights to protect systems and resources effectively.
• Support the formulation and upkeep of IT Disaster Recovery and Business Continuity plans, including relevant documentation and protocols.
• Drive security enhancements by analyzing existing measures, trends, and anticipating future needs.
• Provide leadership and guidance on information security controls to IT teams.
• Stay informed through educational workshops and updated reading materials on technical aspects.
• Ensure adherence to standard security practices across network, server, application, endpoint, and forensic areas.
• Develop, maintain, and enforce all security-related documentation including policies and procedures.
• Monitor industry trends concerning new security challenges and solutions.
• Recommend, procure, and oversee deployment of new or enhanced security technologies, ensuring best practices are followed.
• Protect data confidentiality, integrity, and availability across all enterprise systems and data stores.
• Communicate and collaborate with systems, networking, and business units to align and promote security objectives organizationally.

Team Contributions

• Foster transparent, respectful relationships within the team and university community.
• Drive change and innovation in ICT service delivery.
• Establish strong partnerships across departments.
• Communicate clearly and respectfully.
• Prioritize safety and health for oneself and others.
• Manage multiple responsibilities under rigorous deadlines.
• Balance competing stakeholder interests effectively.

Required Qualifications and Skills

• Bachelor’s degree in Computer Science, Information Technology, Systems Security, or related fields.
• At least six years of professional experience in information security within the past twelve years.
• Familiarity with ITIL framework emphasizing security administration and IT governance across multiple platforms (certification preferred).
• Experience in defining cybersecurity and risk metrics for reporting.
• High emotional intelligence coupled with strong leadership and stakeholder engagement skills.
• Proven management capabilities including budgeting, policy development, personnel management, and staff training.
• Strong communication skills, both verbal and written, with diverse audiences.
• Strategic mindset to navigate multiple priorities and align with enterprise objectives.
• Skills in facilitation, negotiation, and conflict resolution to build effective networks at executive and technical levels.
• Demonstrated resilience and resourcefulness.
• Possession of at least one of these certifications: CISM, GSEC, or CISSP.
• Additional certifications including at least four from (ISC)² SSCP, CCSP, CCFP, ISACA Manager or Auditor, GIAC leadership or technical security, EC-Council CEH or EDRP, Cisco CCNA or CCNP Security, Microsoft Security Engineer, or cloud security certifications (CCSK, AWS, Azure).

Preferred Qualifications

• Master’s degree is an advantage.

Contract Details

This is an annual project-based contract position with possible extensions.

Diversity and Inclusion

The university is committed to equal employment opportunities regardless of race, color, age, gender, religion, nationality, disability, or marital status. Employment decisions are based strictly on qualifications.