[What the role is]

The Infrastructure Security Officer is responsible for supporting NParks' day-to-day infrastructure security operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and Azure/Dynamics environments. The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security issues are identified, tracked, and remediated in a timely manner.
The incumbent will play an operational role in maintaining the organisation's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infrastructure processes and controls.

[What you will be working on]

1. Vulnerability Management

• Manage the end-to-end vulnerability management process across on-premises infrastructure, servers, endpoints, applications, Azure/Dynamics/ESRI/SaaS environments from initial discovery through to final closure, to ensure that vulnerabilities are addressed within NParks' service levels.
• Support the onboarding of hardware, network, software assets for vulnerability monitoring, as well as the setup and daily operations of such systems.
• Support the setup, onboarding and daily management of privileged IDs within privileged identity management systems.
• Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
• Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
• Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
• Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
• Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
• Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.

 

2. Security Incident Response Support

• Working with the CISO (Chief Information Security Officer) and the Infrastructure Team, coordinate and drive the following activities during cybersecurity, data, or resilience incidents:
  • Coordinate incident response activities in collaboration with stakeholders and affected parties, including identification, escalation, containment, recovery, post-incident review.
  • Maintain accurate incident documentation.
  • Drive post-incident reviews to identify lessons learnt and measures to prevent recurrence.
• Track incident trends and recommend operational improvements to enhance security effectiveness.
• Ensure incident management processes are executed in accordance with established security procedures and governance requirements.

 

3. DDoS and Web Application Firewall (WAF) Operations

• Manage the operations of the Content Delivery Network (CDN) service and its associated web application firewall which protects NParks' Internet-facing applications.
• Coordinate with service providers and stakeholders to ensure the effectiveness of deployed security controls.
• Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
• Drive WAF policy reviews, rule updates, and change requests in accordance with operational needs.
• Initiate and manage investigations upon detecting abnormal or suspicious traffic.
• Track service issues and follow up with vendors to ensure timely resolution.
• Recommend operational improvements to enhance security effectiveness.

 

4. Security and  Infrastructure Operations Coordination

• Coordinate infrastructure security operational activities across multiple stakeholders within and outside NParks.
• Maintain security risk, remediation, and compliance tracking registers.
• Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
• Support security governance activities through effective communication and collaboration with stakeholders.
• Escalate operational issues, delays, and security risks where required.
• Ensure infrastructure security processes are executed consistently and effectively.

 

5. Reporting and Compliance Monitoring

• Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
• Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
• Monitor compliance with prescribed security requirements, policies, and standards.
• Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
• Support management review meetings by providing timely and accurate cybersecurity status updates.
• Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.

 

6.  Contract Management

• Manage contracts related to security and audit services.

 

[What we are looking for]

• Areas of study in Infrastructure, Cybersecurity or related fields.

 

Relevant Experience

• Minimum of two years' experience in vulnerability management and related operations.
• Experience working with vulnerability management platforms, such as Wiz, Tenable, TrendMicro, including setup, alert management and daily operations, or similar platforms.
• Experience in planning and implementing security alerts in Microsoft Azure environment.
• Experience in coordinating cybersecurity incidents and remediation activities.
• Experience in planning, implementing and optimising firewall rules for applications.
• Experience in implementing security policies and translating policy requirements into operational controls.

 

Technical Knowledge

• Strong technical knowledge of operating systems and associated utilities, scripting, networks and network devices, with the ability to develop solutions that meet security requirements in an infrastructure environment.
• Clear understanding of vulnerability management processes.
• Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.
• Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.

 

Soft Skills

• Strong coordination and stakeholder management skills.
• Good analytical and problem-solving capabilities.
• Effective verbal and written communication skills.
• Ability to work independently and collaboratively within a team environment.
• Strong organizational skills with attention to detail.
• Ability to manage multiple tasks and priorities in a dynamic operational environment.

 

Preferred Certifications

• Microsoft Azure and/or Dynamics 365 Certifications
• Certifications related to vulnerability management tools.
• Relevant cybersecurity, infrastructure, or security operations certifications.

 

Only shortlisted candidates will be notified.

Successful candidate will be employed on 2-year contract.