Cybersecurity & Awareness Officer

About the role

Velogic is looking for a Cybersecurity & Awareness Officer within its Information Technology/Information Security department. The role manages cybersecurity risks, protects IT systems and data, responds to security incidents and promotes cybersecurity awareness across the Group.

Key responsibilities

• Implement, maintain and continuously improve the Group's cybersecurity framework, policies, standards and risk management practices across countries and business units.
• Coordinate and oversee cybersecurity operations with internal teams and external service providers, covering endpoint, network, email, cloud, identity and access security, MFA, VPN and other technologies.
• Run the vulnerability management programme, including assessments, risk classification, remediation tracking, penetration testing and resolution of critical vulnerabilities.
• Coordinate incident response, including escalation, investigation, documentation, corrective actions, post-incident reviews and lessons learned.
• Monitor security alerts, emerging threats and security events, and coordinate preventive and corrective measures with IT teams and security partners.
• Ensure controls around user access, privileged accounts, joiner/mover/leaver processes, dormant accounts and periodic access reviews, working with HR and IT.
• Assess supplier and partner cybersecurity risks, contribute to business continuity and disaster recovery exercises, and align cybersecurity standards across international operations.
• Develop dashboards and KPIs covering incidents, vulnerabilities, patching, MFA, awareness, audits and risks, giving management visibility of the Group's cybersecurity posture.

Required profile

• Bachelor's degree in Cybersecurity, IT, Computer Science, Information Systems or a related discipline.
• 3+ years' experience in IT, Information Security or Cybersecurity; relevant professional experience can count in lieu of specific qualifications.
• Professional certifications such as CISSP, CISM, CISA, Security+ or CEH are an advantage.
• Proven experience in cybersecurity risk management, vulnerability management and incident management.
• Experience in cybersecurity awareness programmes and coordinating security activities across multiple sites or countries is an advantage.
• Willingness to work across departments and learn the business from the ground up.

Required skills

• Strong understanding of network, infrastructure, endpoint, cloud and Microsoft security environments.
• Excellent communication skills.