IT Security Officer

Job Scope Attack Surface Monitoring, Vulnerability Scanning, and Triage Monitor and triage findings surfaced by our Attack Surface Management (ASM) and Vulnerability Management tools Assess each finding for validity, severity, and exploitability before escalating or acting on it Distinguish genuine exposures from false positives and contextualise findings against our asset inventory Prioritise remediation efforts based on risk Remediation Workflow Management Work with system owners to follow up on outstanding findings Track remediation progress and ensure findings are resolved in a timely manner Manage exceptions and risk acceptance where remediation is not immediately feasible Communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance Reporting & Insights Consolidate vulnerability data and remediation metrics for reporting Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape Provide recommendations to improve our overall exposure management programme Process Improvement Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices Prerequisites Bachelor’s Degree in Computer Science/Information Security or equivalent Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred Familiar with IM8 Cybersecurity policies will be preferred Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar) Proficiency in programming languages such as Python will be advantageous Strong analytical and judgement skills, with the ability to think critically and make sound recommendations Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings Meticulous, with a high degree of integrity, initiative, and energy