About the Role:

The IT Security Administrator is responsible for safeguarding the organisation’s information assets by monitoring, analysing, and responding to security threats across a wide range of security tools and platforms. This role plays a critical part in maintaining situational awareness, investigating security alerts, managing reported suspicious emails, and ensuring systems remain compliant with security standards and best practices. Working closely with the Senior Manager of IT Security and other cross-functional teams, the IT Security Administrator supports daily security operations, contributes to incident response activities, assists with security awareness training, and helps enhance the company’s overall security posture. The ideal candidate is detail-oriented, proactive, technically skilled, and committed to upholding high standards of integrity and data protection

 

Key Responsibilities:

• Monitor the security tools implemented, including but not limited to CrowdStrike, Zscaler, Microsoft Defender, Tanium, Knowbe4, Tenable, Office 365, Azure AD, and computer log files, etc., to maintain situational awareness.
• Investigate security alerts received by the external SOC (Security Operations Centre). The investigation will make use of all tools and log files possible and will determine if the alert is a false positive, a security event, an actual attack, and/or a security incident. The investigation will answer and report on the who, what, where, when, and how of the occurrence. The investigation will report on any actions taken to contain and/or remediate the situation and any recommendations for further action.
• Escalate any security incident (the confidentiality, integrity, or availability of any information or information asset that is negatively impacted) to the Senior Manager, IT Security, and Director of IT Operations.
• Investigate all reported suspicious emails and determine whether the email is malicious, non-malicious, or legitimate. The IT Security Administrator will categorise and file the reported emails to support tracking and reporting activities. Also replies to the user who reported the suspicious email with a message reporting the determination and any recommendations.
• Under the direction of the Senior Manager, IT Security, utilise the Supernus KnowBe4 application to deploy periodic IT Security Training to all users, such as Security Awareness Training, Privacy Training, etc.
• Concentrated effort to keep software and hardware up-to-date with security levels and patches.
• Maintaining situational awareness and keeping current with cyber security news and threat actor Tactics, Techniques, and Procedures (TTPs).
• Researching, condensing, and reporting on security bulletins and publicly identified threats.
• Assist coworkers where necessary, including but not limited to onboarding, training, investigations, reports, etc.
• Assists in performing technical assessments of information security incidents and provides necessary reporting and remediation actions.
• Adhere to and enforce security policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.
• Collaborates with cross-functional teams to define, design, and deliver new and enhanced security measures that meet the needs of the company, clients, and end-users.