IT and Enterprise Cybersecurity Engineer

About the role

Responsible for designing, implementing, and maintaining secure IT and enterprise network environments. Develops cybersecurity strategies, policies, and technical controls aligned with ISO 27001 and NIST frameworks to protect OSCO and client information assets from internal and external threats.

Key responsibilities

• Design, implement, and maintain enterprise IT security architecture including network security, cloud security, and endpoint protection.
• Develop and enforce cybersecurity policies, standards, and procedures aligned with ISO 27001 and NIST Cybersecurity Framework.
• Perform risk assessments, vulnerability scanning, and penetration testing to identify and prioritize security risks.
• Monitor enterprise systems using SIEM platforms and manage security alerts, triage, and escalation.
• Handle incident detection, investigation, response, and recovery activities.
• Manage identity and access control, directory services, and privileged access management (PAM).
• Oversee system hardening, patch management, and secure configuration baselines across enterprise IT infrastructure.
• Conduct security awareness training and phishing simulation exercises.
• Support ISO 27001 certification and audit readiness activities.
• Collaborate with IT, operations, and compliance teams to maintain a secure and compliant infrastructure.

Required profile

• Bachelor's degree in Cybersecurity, Computer Engineering, Information Technology, or Network Engineering.
• Minimum 4 years of IT/enterprise cybersecurity experience.
• Relevant certification such as CISSP, CISM, CEH, CompTIA Security+ or equivalent.

Required skills

• SIEM platforms (Splunk, Microsoft Sentinel, or equivalent)
• Enterprise firewall administration and network security
• Vulnerability management and penetration testing
• Identity and access management, including privileged access management (PAM) solutions
• Cloud security (Azure or AWS)
• Knowledge of ISO 27001 and NIST Cybersecurity Framework
• Incident response planning and execution