1. Professional Roles and Responsibilities:
Responsible for handling all type of Infrastructure Information Security alerts –
Review the alerts and handle them as per the process & best practices. This involves
working with different groups and ensuring that all the alerts are closed in a timely
manner [SLA]
Patch & Vulnerability Management Process – Responsible for identifying security
gaps and vulnerabilities through different tools and techniques in organization
devices/systems. Scan results are analysed and fixes are applied as per the
organization vulnerability policy
System Security Logs: Monitor and analyse the logs using tools for unusual or
suspicious activity. Interpret such activity and make recommendations for resolution
Compile Security Metrics - Manage various IT & IS Security reports based on
information generated from different security Applications, Services & tools –
Compile security metrics and efficiency security metrics for management review
Assist and Contribute to IT risk identification, classification and response processes
Actively contribute to inter-departmental and cross-functional teams for the protection
of information & information assets in organization
Involve & support in organization IS internal audits [iso 27001,KCO ,etc.] on
assigned departments effectively to ensure systems are functioning, performing
properly and audit report & recommendation has been submitted to management
Actively conducting training/awareness program for newly joined employee on
Information Security
Provide support and direction for improving InfoSec policies, processes, and
standards