Cybersecurity & Awareness Engineer

About the role

This role covers the implementation, maintenance and continuous improvement of the Group's cybersecurity framework, policies, standards and risk management practices across countries and business units. It also oversees cybersecurity operations with internal teams and external service providers.

Key responsibilities

• Coordinate and oversee cybersecurity operations covering endpoint, network, email, cloud, identity and access security, MFA, VPN and other technologies
• Manage the vulnerability management programme: assessments, risk classification, remediation tracking, penetration testing and resolution of critical vulnerabilities
• Coordinate incident response, including escalation, investigation, documentation, corrective actions, post-incident reviews and lessons learned
• Monitor security alerts, emerging threats and events, and coordinate preventive and corrective measures with IT teams and security partners
• Ensure controls on user access, privileged accounts, joiner/mover/leaver processes, dormant accounts and periodic access reviews, working with HR and IT
• Assess supplier and partner cybersecurity risks, contribute to business continuity and disaster recovery exercises, and align standards across international operations
• Develop dashboards and KPIs on incidents, vulnerabilities, patching, MFA, awareness, audits and risks to give management visibility of the Group's security posture

Required profile

• Bachelor's degree in Cybersecurity, IT, Computer Science, Information Systems or a related field; 3+ years of experience in IT, information security or cybersecurity, with relevant professional experience counted in lieu of qualifications
• Professional certifications such as CISSP, CISM, CISA, Security+ or CEH are an advantage
• Proven experience in cybersecurity risk, vulnerability and incident management
• Experience in cybersecurity awareness programmes and coordinating security activities across multiple sites or countries is an advantage
• Willingness to work across departments and learn the business from the ground up

Required skills

• Strong understanding of network, infrastructure, endpoint, cloud and Microsoft security environments
• Excellent communication skills