[What the role is]
The Infrastructure Security Officer is responsible for supporting NParks' day-to-day infrastructure security operations, vulnerability management activities, incident response coordination, security service management, and compliance monitoring across both on-premises and Azure/Dynamics environments. The role requires close collaboration with infrastructure, application, facilities management, and external service providers to ensure security issues are identified, tracked, and remediated in a timely manner.
The incumbent will play an operational role in maintaining the organisation's cybersecurity posture, ensuring compliance with government security requirements, and supporting continuous improvement of security and infrastructure processes and controls.
[What you will be working on]
1 . Vulnerability Management
Manage the end-to-end vulnerability management process across on-premises infrastructure, servers, endpoints, applications, Azure/Dynamics/ESRI/SaaS environments from initial discovery through to final closure, to ensure that vulnerabilities are addressed within NParks' service levels.
Support the onboarding of hardware, network, software assets for vulnerability monitoring, as well as the setup and daily operations of such systems.
Support the setup, onboarding and daily management of privileged IDs within privileged identity management systems.
Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.
2. Security Incident Response Support
Working with the CISO (Chief Information Security Officer) and the Infrastructure Team, coordinate and drive the following activities during cybersecurity, data, or resilience incidents: Coordinate incident response activities in collaboration with stakeholders and affected parties, including identification, escalation, containment, recovery, post-incident review.
Maintain accurate incident documentation.
Drive post-incident reviews to identify lessons learnt and measures to prevent recurrence.
Track incident trends and recommend operational improvements to enhance security effectiveness.
Ensure incident management processes are executed in accordance with established security procedures and governance requirements.
3. DDoS and Web Application Firewall (WAF) Operations
Manage the operations of the Content Delivery Network (CDN) service and its associated web application firewall which protects NParks' Internet-facing applications.
Coordinate with service providers and stakeholders to ensure the effectiveness of deployed security controls.
Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
Drive WAF policy reviews, rule updates, and change requests in accordance with operational needs.
Initiate and manage investigations upon detecting abnormal or suspicious traffic.
Track service issues and follow up with vendors to ensure timely resolution.
Recommend operational improvements to enhance security effectiveness.
4. Security and Infrastructure Operations Coordination
Coordinate infrastructure security operational activities across multiple stakeholders within and outside NParks.
Maintain security risk, remediation, and compliance tracking registers.
Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
Support security governance…