IT Support and Information Security Engineer

Security and Governance

• Support ISO 27001 ISMS controls, evidence management, compliance requirements, and audit coordination.
• Coordinate evidence for internal audits, external ISO 27001 assessments, surveillance audits, and recertification audits.
• Track audit observations and corrective or preventive actions through closure.
• Conduct root cause analysis, document lessons learned, and maintain incident records.
• Support incident response plans, business continuity, disaster recovery, tabletop exercises, and security drills.

Technical Competencies

• Strong knowledge of Windows 10/11 and Microsoft 365 administration.
• Experience with Active Directory, Entra ID, Intune, SCCM, and Windows Server.
• Understanding of endpoint security, Microsoft Defender for Endpoint, identity and access management, and network troubleshooting.
• Practical experience in incident response, vulnerability management, patch management, and endpoint hardening.
• Knowledge of ISO 27001 ISMS, audit support, risk assessment, and risk treatment.
• Experience with security monitoring and threat detection tools is required; Microsoft Sentinel is advantageous.
• Ability to prepare security documentation, audit evidence, operational records, and management reports.

Preferred Certifications

• Preferred certifications include ISO 27001 Internal Auditor, ISO 27001 Lead Auditor, CompTIA Security+, ITIL Foundation, Microsoft Azure Security, or Microsoft Azure certifications.

Work Style