IT Security & Compliance Engineer

Role Overview

Key Responsibilities

• Monitor, investigate, and respond to security incidents, threats, malware, phishing, and ransomware attacks through Security Operations (SOC).
• Lead security compliance enablement aligned with ISO 27001 and the NIST Cybersecurity Framework, including risk assessments, internal audits, policy management, vendor security reviews, and security awareness programs. (As the company already possess ISO, the defined compliances to be enabled across organization. NIST is in working)
• Administer and secure Microsoft 365 environments, including Microsoft Entra ID, Conditional Access, MFA, Microsoft Defender, Purview, DLP, email security, and audit monitoring.
• Manage endpoint security solutions, EDR platforms, device compliance, encryption, and vulnerability remediation.
• Conduct vulnerability assessments, coordinate penetration testing, manage patching, and track remediation activities.
• Implement and maintain network security controls, including firewalls, VPNs, IDS/IPS, DNS security, and network segmentation.
• Manage Identity & Access Management (IAM), including RBAC, privileged access management, user lifecycle management, and periodic access reviews.