
Senior IT Security Officer
Full time @Aurum Afghanistan Financial Company posted 1 week ago in Information Technology (IT) Email JobJob Detail
-
Job ID 35751
- Experience 2 Years
- Gender Male/Female
- Qualifications Bachelor’s Degree
Job Description
About Aurum Afghanistan Financial Company
Job Summary
We are seeking a highly skilled Senior IT Security Officer to join our team and oversee the protection and security of our organization’s IT infrastructure. The ideal candidate will be responsible for driving efforts to prevent, monitor, and respond to information/data breaches and cyber-attacks, ensuring the execution of Information Security directives and activities in alignment with the company’s data security policy.
Key Responsibilities
1.    Design, update, and enforce enterprise-wide security policies, standards, and procedures aligned with industry frameworks and Organization’s security policies.
2.    Coordinate security awareness programs and train employees on cybersecurity best practices, threat recognition and ensure compliance with security regulations and standards.
3.    Oversee the execution of comprehensive security assessments and compliance audits to proactively identify vulnerabilities and recommend security enhancements.
4.    Conduct regular vulnerability assessments, security audits, and risk analyses to identify gaps and implement effective mitigation strategies.
5.    Ensure security incidents are managed and forensic investigations are executed when necessary.
6.    Cross-functional collaboration is maintained to systematically address emerging security concerns and implement security best practices.
7.    Lead the detection, investigation, and response efforts for security breaches, cyberattacks, or system anomalies
8.    Provide strategic guidance and recommendations to enhance the organization’s overall security posture.
9.    A comprehensive understanding of current security trends, advanced threat, and emerging technologies is maintained to ensure potential systemic risks are proactively mitigated.
10. Develop and maintain security incident response plans and procedures.
11. Lead and mentor a team of security professionals to ensure effective execution of security initiatives.
12. Act as a technical liaison to upper management, legal teams, and external auditors to ensure regulatory and data privacy compliance.
13. Ensure compliance with industry regulations, standards, and best practices.
14. Supervise and maintain security systems, including firewalls, SIEM  platforms, and endpoint protection tools.
Qualifications
Qualifications & Skills
·       Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
·       Proven experience in a senior-level information security role, with a strong track record of implementing, managing, and improving information security programs and initiatives.
·       A minimum of 2–4 years of relevant experience in IT, information security, or cybersecurity.
·       In-depth knowledge of information security principles, best practices, and technologies, including network security, encryption, identity and access management, risk management, and security incident response.
·       Excellent communication, leadership, and analytical skills, with the ability to collaborate effectively with cross-functional teams, communicate technical risks to non-technical stakeholders, and report security matters to senior management.
·       Certification of ISO/IEC 27001, CompTIA Security +, CISSP, CISM are highly preferred.
Personal Attributes
·       High level of integrity and ability to handle sensitive financial systems
·       Strong problem-solving skills and ability to work under pressure
·       Detail-oriented with a strong focus on documentation and audit readiness

