IT Security Process Specialist

About the role

The IT Security Process Specialist designs, implements and maintains security processes that protect the company’s information systems. Working closely with the CISO and technical teams, the specialist ensures governance, compliance and continuous improvement of security workflows.

Key responsibilities

• Collaborate with the CISO to establish and maintain governance frameworks, documenting and reviewing security processes against standards and regulations.
• Develop and enforce IAM procedures, including RBAC, onboarding/off‑boarding workflows, privileged access policies and periodic access reviews.
• Manage the vulnerability management lifecycle: risk assessment, prioritisation, remediation planning and coordination with IT teams.
• Define and monitor patching standards and schedules to keep systems compliant with security requirements.
• Identify process gaps, propose corrective actions and drive continuous‑improvement initiatives.
• Work with technical teams to ensure security processes are practical, efficient and aligned with operational needs.
• Design and deliver annual security awareness training for staff.
• Support incident‑response activities by keeping process documentation up‑to‑date and addressing governance‑related root causes.

Required profile

• Bachelor’s or Master’s degree in IT or a related field.
• ITIL certification.
• Professional cybersecurity certification such as CISM or CISSP.
• Strong analytical, problem‑solving and communication skills.

Required skills

• Network technologies: TCP/IP, firewalls, routing, switching, VLANs, network security architectures.
• Operating systems: Windows Server, Linux Red Hat and other enterprise platforms.
• Security frameworks: ISO 27001, NIST, CIS Controls.
• IAM and RBAC concepts, vulnerability management and patch management processes.