Information Security Specialist

- Monitor security tools to identify and respond to security events and anomalies. - Conduct regular reviews of logs and alerts generated by systems and reports. - Investigate and escalate security incidents following established procedures. - Maintain and document security incident records, including root cause analysis and corrective actions. - Assist with user access provisioning, modifications, and de-provisioning following least privilege and segregation of duties principles. - Oversee privileged access activities and authentication logs, including multi-factor authentication where applicable. - Aid in periodic access recertification processes. - Execute vulnerability scans and keep track of remediation for identified weaknesses. - Collaborate with IT teams to ensure timely patching of systems and applications. - Keep vulnerability registers updated and report status to the Information Security Officer. - Support the setup and calibration of logging and monitoring tools. - Ensure logs are collected, stored, and safeguarded as per policy and regulatory standards. - Assist in integrating new systems into centralized monitoring platforms. - Engage in incident detection, analysis, containment, and recovery activities. - Support forensic data gathering and documentation of incidents. - Participate in post-incident reviews and lessons learned sessions. - Help review security configurations for systems and applications. - Contribute to third-party risk assessments by gathering security documentation and evidence. - Monitor third-party access and activities where relevant. - Assist in delivering security awareness training and phishing simulations. - Help respond to audit and regulatory inquiries by providing necessary evidence and documentation. - Ensure compliance with internal policies and procedures.