Information Technology Security Engineer

As an IT Security Engineer, you will support the day-to-day operation, implementation, and continuous improvement of information security controls across the global IT environment of a multinational organisation.

Working under the guidance of the Senior IT Security Engineer and in close collaboration with Global IT management, the role provides hands-on support for security operations, compliance activities, technology projects, risk remediation, and security-related support requests. The position helps increase the team’s execution capacity and contributes to the timely delivery of security initiatives and operational commitments.

The role is expected to assist with the execution of security strategy, architecture, governance, incident response, disaster recovery, and vendor management activities when assigned.

Key Responsibilities

Security Operations and Support

• Monitor security alerts and service requests and coordinate their investigation, resolution, and escalation with internal teams and service providers.
• Perform initial analysis and triage of security events and assist with containment, remediation, evidence collection, and documentation.
• Provide operational support for endpoint protection, identity security, vulnerability management, security monitoring, and related security platforms.
• Maintain security procedures, technical documentation, knowledge articles, incident records, and evidence repositories.
• Provide timely and accurate support to internal customers on security-related issues and requests.

Vulnerability, Risk, and Compliance Support

• Assist with vulnerability assessments and coordinate remediation activities with infrastructure, application, workplace, and service delivery teams.
• Track identified vulnerabilities, risks, control gaps, and remediation actions through closure, escalating delays or significant issues as appropriate.
• Support risk assessments and security reviews for new technologies, services, suppliers, and projects.
• Support SOX IT General Controls activities, including evidence collection, testing support, remediation tracking, and audit coordination.
• Assist with internal and external audits and maintain the documentation required to demonstrate control execution and compliance.
• Contribute to the maintenance and improvement of security policies, standards, procedures, and operational controls.

Identity, Infrastructure, and Cloud Security

• Support identity and access management activities, including privileged access reviews, access certification, and follow-up of access-related findings.
• Assist with security configuration reviews for cloud services, servers, endpoints, network devices, and enterprise applications.
• Collaborate with technical teams to implement security requirements, hardening measures, and corrective actions across cloud and on-premises environments.
• Support the implementation, testing, and documentation of security controls and technology deployments.

Security Projects and Leadership Support

• Provide operational and technical support to the Senior IT Security Engineer in daily security activities and assigned strategic initiatives.
• Assist Global IT management with security projects, risk mitigation plans, audits, remediation activities, and operational follow-up.
• Support the execution of security strategy, architecture roadmaps, incident response plans, disaster recovery activities, and governance initiatives as directed by the relevant owner.
• Prepare project documentation, operational reports, KPI updates, audit evidence, and management status updates.
• Coordinate assigned actions with internal teams, vendors, managed service providers, and project stakeholders.
• Participate in testing, implementation, transition-to-operations, and post-implementation activities for security solutions.
• Escalate significant security risks, incidents, control failures, and delivery concerns to the Senior IT Security Engineer and Global IT management.

Vendor Coordination and Continuous Improvement

• Support the Senior IT Security Engineer and Global IT management in coordinating security vendors and managed service providers.
• Track service requests, incidents, deliverables, action items, and escalations assigned to third parties.
• Participate in technical evaluations, proof-of-concept activities, and reviews of security solutions.
• Identify opportunities to improve security processes, tools, documentation, reporting, and operational efficiency.
• Assist with security awareness activities, communications, and end-user education initiatives.
• Perform other security-related duties as assigned.

Requirements & Qualifications

Education

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.

Experience

• Minimum 3 years of relevant experience in IT security, cybersecurity, IT infrastructure, security operations, or a related technical discipline.
• Experience supporting enterprise IT environments and working with infrastructure, application, cloud, or workplace technology teams.
• Hands-on experience with security monitoring, vulnerability management, incident response, identity security, or endpoint security.
• Experience supporting audits, compliance activities, control testing, or risk remediation is preferred.
• Experience working with third-party providers or in a multinational environment is desirable.
• Ability to prioritise multiple operational and project activities while meeting agreed deadlines.
• Strong written and verbal communication skills, with the ability to document technical information clearly and work with diverse stakeholders.

Technical Knowledge

• Microsoft Entra ID and identity security concepts.
• Microsoft 365 security and compliance capabilities.
• Endpoint protection, vulnerability management, and security monitoring solutions.
• Network and cloud security fundamentals.
• Windows Server and enterprise infrastructure concepts.
• Incident management, risk management, and security control processes.
• Knowledge of SOX IT General Controls is highly desirable.
• PowerShell or other scripting experience is an advantage.

Preferred Certifications

• CompTIA Security+, Microsoft SC-200, Microsoft SC-300, Microsoft SC-900, ISC2 Certified in Cybersecurity, or another relevant security certification.