1. Monitor networks and systems for security breaches or intrusions and respond promptly to mitigate risks. 2. Conduct vulnerability assessments and penetration testing to identify security weaknesses and recommend remediation strategies. 3. Develop and implement incident response plans to address security breaches, including containment, eradication, and recovery. 4. Conduct security awareness programs and train employees on cybersecurity best practices and policies. 5. analyse security incidents and conduct forensic investigations to determine the root cause and impact of breaches. 6. collaborate with IT teams to implement security controls and configurations based on risk assessments and industry best practices. 7. research and evaluate emerging cybersecurity threats and vulnerabilities to proactively recommend preventive measures. 8. participate in the development and testing of security protocols, encryption techniques, and access control measures. 9. prepare and present reports to management on cybersecurity posture, incidents, and recommendations for improvement.
1. develop and implement information security strategies and programs to protect organisational data and systems. 2. conduct regular risk assessments and develop risk management plans to mitigate security threats and vulnerabilities. 3. develop and oversee incident response plans and procedures to address security incidents promptly and effectively. 4. ensure compliance with relevant security standards, regulations, and laws through audits, assessments, and continuous monitoring. 5. collaborate with executive management to align information security initiatives with business objectives and priorities. 6. manage and mentor a team of cybersecurity professionals, providing guidance and support in security operations. 7. monitor emerging threats and trends in cybersecurity, implementing proactive measures to safeguard against potential risks. 8. evaluate and recommend security technologies, tools, and solutions to enhance the organisation's security posture. 9. conduct security awareness training and education programs for employees to promote a culture of cybersecurity awareness. 10. prepare and present regular reports on the organisation's security status, incidents, and mitigation efforts.