Governance Risk & Compliance Specialist

The Governance, Risk and Compliance (GRC) have setup an horizontal function focused on taking on governance, risk and compliance related work across EPD with the aim to centralize the management of GRC work across EPD.

We are seeking a skilled IT Security Operations Specialist to manage and maintain our organisation's security posture through various operational and compliance management tasks and monitoring activities.

Key Responsibilities:

System Security Management

• Execute regular operating system patching across all environments
• Manage enterprise password policies and renewal processes
• Conduct vulnerability assessments and oversee remediation efforts
• Monitor and maintain antivirus solutions across all systems
• Ensure accurate server inventory and data in TechLens platform

Certificate and Lifecycle Management

• Manage SSL certificate lifecycle, including timely renewals
• Track and report on End-of-Life (EOL) and End-of-Support (EOS) for all systems
• Coordinate system upgrades or replacements for EOL/EOS components

Access Control and Monitoring

• Perform User Access Reviews (UAR) periodically
• Monitor and investigate failed login attempts
• Manage privileged access rights and permissions
• Review and analyse security logs for potential threats

Risk and Compliance

• Conduct regular risk assessments
• Address and remediate Cloudscape security findings
• Prepare security reports for management review

What are we looking for:

• Required Qualifications:
• Bachelor's degree in IT, Computer Science, or related field
• 5+ years of experience in IT security operations
• Relevant security certifications (e.g., CompTIA Security+, CISSP)
• Strong knowledge of security tools and best practices
• Amazon Web Services (AWS) certifications

Skills:

• Strong analytical and problem-solving abilities
• Excellent documentation and communication skills
• Experience with security monitoring tools
• Knowledge of compliance frameworks
• Ability to work in a fast-paced environment
• Familiarity with Amazon Web Services (AWS) services such as IAM, CloudWatch etc