eMASCO

Information Security Officer is responsible for planning, implementing, and maintaining measures to protect an organisation’s information system and data from cyber threats, unauthorised access, and breaches. They assess vulnerabilities, design secure networks, monitor security systems, and respond to incidents, ensuring compliance with legal and regulatory standards. The role also encompasses daily administration of security infrastructures and the development of strategies to mitigate information security risks.

Tasks

Develop, implement, and enforce information and data security policies, procedures, and controls.

Conduct risk and vulnerability assessments to identify, prioritise, and mitigate threats to Information Technology (IT) systems and networks.

Monitor IT systems, networks, and security logs to detect suspicious activities and support incident response.

Manage, configure, and maintain security infrastructure, including firewalls, access controls, and security tools.

Respond to cybersecurity and data security incidents, coordinating mitigation and corrective actions.

Provide guidance and support for organisational information security operations and initiatives.

Ensure compliance with data protection laws, security regulations, and organisational policies and standards.

Conduct cybersecurity awareness training and promote best practices among employees.

Evaluate and analyse threat intelligence and security data to support risk management and operational improvements.

IT-090-5

ICT SYSTEM SECURITY TECHNOLOGIST (LEVEL 5) (Level 5)

Skills

Basic

Active listening and the ability to collaborate effectively with users and technical teams.

Attention to detail to identify vulnerabilities and ensure compliance with security policies and procedures.

Effective verbal and written communication for reporting incidents and coordinating with stakeholders.

Problem-solving abilities to respond to security issues and recommend improvements.

Strong analytical and critical thinking to assess security threats, risks, and incidents.

Specific

Competency in analysing malware, security logs, and cybersecurity threats.

Competency in identity and access management.

Competency in network and system security administration and secure configuration practices.

Competency in security risk assessment, auditing, and threat analysis techniques.

Knowledge in information security policies, procedures, and standards.

Knowledge in regulatory compliance frameworks and data protection laws.

Proficiency in cybersecurity tools and platforms, antivirus software, and cloud security services.

Proficiency in managing and configuring security infrastructure and intrusion detection systems.

Proficiency in scripting languages for security automation, including JavaScript and other relevant tools.

Additional Info

QUALIFICATION

Bachelor’s degree or equivalent

Related Courses

Claimable Course

e-Latih Online Course

Madani TVET Course

Minor Unit Group

2531-01

Cybersecurity Executive

2531-02

Digital Forensic Specialist

2531-03

Information Security Officer

2531-04

Cybersecurity Analyst

2531-05

Test Analyst (Information Technology)

2531-06

Security Infrastructure Engineer

2531-07

Internet Safety Evaluator

2531-08

Security Consultant

📌 NOTICE 📌