Information Security Officer

About the role

Mauritius Network Services Limited, a public-private partnership provider of digital systems and services since 1994, is looking for an Information Security Officer. The role covers risk management, vulnerability assessment, penetration testing, security hardening, incident reporting and security awareness, and supports the ISO 27001 implementation.

Key responsibilities

• Apply an effective risk management approach to improve the organisation's security posture.
• Perform penetration testing on internet-facing web application servers and conduct vulnerability assessments on internal systems and workstations.
• Monitor endpoint security solutions and strengthen perimeter defences (firewall rules, WAF, IPS/IDS, DLP, least privilege access).
• Assist the ISO 27001 team in implementing the ISMS and encourage staff to follow its policies.
• Apply security patches to live systems only after thorough testing.
• Develop security awareness training and promote good cyber hygiene.
• Use tools such as Wireshark, Nessus, Metasploit, OWASP ZAP, Burp Suite and air-capture tools for security testing.
• Manage and monitor Office 365 cloud security and respond to threats.
• Understand client project security requirements and perform VAPT and hardening before delivery.
• Communicate threats and exposures in business terms and draft reports on threats, vulnerabilities and incident responses.
• Stay current with security trends and CVEs.

Required profile

• BSc in Computer Science with Network Security or BSc in Cyber Security.
• At least three years of post-qualification experience in an information security role.
• Professional information security certification is an advantage.

Required skills

• Familiarity with security scanning and enumeration tools.
• Knowledge of frameworks such as ISO 27001, GDPR, NIST and MITRE ATT&CK.
• Broad understanding of Windows and Linux.