IT Support & Information Security Engineer

Duties and Responsibilities

• Provide professional day-to-day support for desktops, laptops, mobile devices, printers, peripherals and network connectivity issues
• Administer and troubleshoot Windows 10/11, Microsoft 365, Active Directory, Entra ID, Intune, SCCM and Windows Server environments
• Configure, deploy and maintain laptops, desktops, mobile devices and endpoint security tools in line with operational standards
• Support Windows, Apple macOS, iOS and Android devices across the organisation
• Manage user onboarding, offboarding, access provisioning and identity lifecycle activities with appropriate accuracy and control
• Maintain IT asset inventory, lifecycle records, support documentation and knowledge base articles
• Participate in after-hours support and emergency maintenance activities when required
• Develop and maintain AI agents, where required, to support business and operational needs
• Investigate and respond to security incidents, including malware infections, phishing attempts, unauthorised access and endpoint compromises
• Carry out incident triage, containment, eradication, recovery and post-incident review activities in accordance with defined procedures
• Support vulnerability assessments, remediation planning, patch management and endpoint hardening activities
• Conduct periodic reviews of user accounts, privileged access and system configurations
• Monitor adherence to security baselines, organisational policies and endpoint security standards
• Support the implementation and ongoing management of the Information Security Management System
• Help maintain ISO 27001 certification controls, evidence records and related compliance requirements
• Coordinate evidence collection for internal audits, external ISO 27001 assessments, surveillance audits and recertification audits
• Track audit observations, corrective actions and preventive actions through to timely closure
• Maintain audit trails, security policies, standards, procedures and operational records in a clear and organised manner
• Contribute to management reviews, compliance reporting, risk assessments and periodic security control reviews
• Act as the initial point of response for information security incidents and escalate critical matters in accordance with established procedures
• Conduct root cause analysis, document lessons learned and maintain accurate incident records
• Support the development and testing of incident response plans, business continuity procedures and disaster recovery activities
• Participate in tabletop exercises, security response drills and incident trend reporting for management review

Position Specifications