IT Security Engineer

Role Overview

Responsible for designing, implementing, securing, and maintaining the organization's IT infrastructure, cloud environments (AWS & GCP), and endpoint devices. The role will establish IT infrastructure and security practices while supporting IT Governance, Risk, and Compliance (ITGRC) audits.

Key Responsibilities

1. Cloud Infrastructure (AWS & GCP)

• Manage secure and scalable cloud infrastructure from scratch.
• Configure cloud networking, IAM, access controls, monitoring, and backups.
• Implement cloud security best practices, automation, and cost optimization.
• Maintain infrastructure reliability, availability, and disaster recovery readiness.

2. IT Security & Cybersecurity

• Establish and maintain IT security policies, standards, and technical controls.
• Implement identity and access management, MFA, endpoint protection, and vulnerability management.
• Monitor security threats, manage incidents, and perform security assessments.
• Ensure infrastructure and systems follow security best practices.

3. IT Infrastructure & Device Management

• Implement and manage IT asset inventory and endpoint management (MDM/UEM).
• Manage employee devices, software, corporate accounts, and IT access.
• Establish secure employee onboarding and offboarding processes.
• Maintain IT systems, documentation, and operational procedures.

4. ITGRC & Audit Support

• Implement IT General Controls (ITGC) aligned with applicable compliance requirements.
• Support ISO 27001 and other relevant security frameworks.
• Prepare technical documentation, access reviews, system logs, and audit evidence.
• Assist internal and external audits and remediate identified security and compliance gaps.

5. IT Infrastructure & Security Setup

• Assess existing infrastructure and identify security and operational gaps.
• Select and implement appropriate IT infrastructure, security, and management tools.
• Enhance and execute IT processes, SOPs, security baselines, and monitoring procedures.