Security Administrator

Role & responsibilities

1. Security Technology Administration

• Administer and maintain assigned security platforms, such as firewalls, IDS/IPS, web application firewall,

secure web gateway or proxy, VPN, endpoint security, data loss prevention, privileged access management

and security monitoring tools.

• Implement approved configuration changes, upgrades, patches, licence renewals and rule-base updates

through the applicable change-management process.

• Review configurations and access privileges against approved security standards, baselines and the principle

of least privilege.

• Maintain accurate inventories, architecture details, configuration records, rule review evidence and operating

procedures for assigned security solutions.

2. Security Monitoring and Incident Support

• Review security alerts, logs and exception reports and coordinate investigation with the SOC, infrastructure,

application and service-provider teams.

• Support incident triage, containment, eradication, recovery, evidence preservation and root-cause analysis as

assigned.

• Track corrective actions arising from security incidents and confirm closure evidence.

• Participate in cyber incident response exercises, disaster recovery tests and resilience assessments.

3. Vulnerability and Security Assurance

• Coordinate vulnerability assessment and penetration testing activities for infrastructure, applications and

security devices.

• Review findings, assign remediation actions to the relevant owners and monitor closure within defined

timelines.

• Validate remediation through retesting or other approved evidence and escalate overdue or high-risk items.

• Support security hardening reviews and periodic control-effectiveness assessments.

IT Security & Compliance | Job DescriptionPage 2

4. Project, Audit and Governance Support

• Review security requirements for new systems, major changes, third-party integrations and technology

projects.

• Provide technical evidence and clarifications for internal, external and regulatory audits.

• Support implementation of information security policies, standards and approved risk-treatment plans.

• Prepare accurate operational dashboards, exception reports and status updates for management review.

Preferred candidate profile

Mandatory experience: Minimum 2 years of hands-on experience in information security operations, security

administration, network security, endpoint security, SOC operations, vulnerability management or a closely

related area.