IT Cybersecurity Project Lead

About the Job

IT Cybersecurity Project Lead IT Cyber Security Project Lead Position Information Job Title: IT Cyber Security Head Department: Information Technology / Cybersecurity Reports To: IT Cyber Security Head Location: [Location] Employment Type: Full-Time Position Purpose The Cybersecurity Operations Engineer is responsible for the implementation, operation, monitoring, and continuous improvement of cybersecurity controls across the organization's Information Technology (IT) and Operational Technology (OT) environments. The role focuses on security monitoring, incident response, vulnerability management, endpoint security, identity security, and security tooling administration. The position plays a key role in protecting organizational assets from cyber threats while supporting compliance with cybersecurity policies, standards, and regulatory requirements. The Cybersecurity Operations Engineer works closely with IT infrastructure, cloud, network, application, and OT teams to ensure security controls are implemented and operating effectively. Key Responsibilities Security Operations Monitor security events and alerts generated by security monitoring platforms. Investigate suspicious activities and security incidents. Perform incident triage, containment, eradication, and recovery activities. Support cyber incident response and forensic investigations. Participate in on-call cyber incident response activities where required. Maintain incident records and lessons learned documentation. Security Monitoring & SIEM Administer and maintain SIEM platforms. Develop and tune detection rules and alert thresholds. Monitor log sources and ensure adequate security event coverage. Investigate security alerts and escalate critical findings. Develop use cases and threat detection analytics. Endpoint and Server Security Manage Endpoint Detection and Response (EDR/XDR) solutions. Support endpoint protection platforms such as Microsoft Defender, CrowdStrike, Trend Micro, or equivalent. Monitor and investigate endpoint threats. Ensure security agents remain operational and compliant. Support server hardening and security baseline implementation. Vulnerability Management Perform vulnerability scanning activities. Analyse vulnerability assessment reports. Prioritize remediation actions based on risk. Coordinate remediation efforts with infrastructure and application teams. Monitor closure of identified vulnerabilities. Produce vulnerability metrics and reporting. Identity and Access Management Support privileged access management solutions. Monitor privileged account usage. Assist with periodic access reviews. Support identity governance activities. Ensure compliance with least-privilege principles. Security Tool Administration Administer cybersecurity technologies including: SIEM EDR/XDR PAM Vulnerability Management Platforms Email Security Solutions Web Security Gateways Security Monitoring Platforms Threat Intelligence Platforms Maintain health and performance of cybersecurity systems. Support technology upgrades and deployment activities. Threat Management Monitor emerging cyber threats and vulnerabilities. Review threat intelligence feeds. Assess threats for organisational relevance. Recommend protective measures and compensating controls. Support threat hunting activities. OT/Industrial Cybersecurity Support Assist with cybersecurity monitoring of OT environments. Support IEC 62443-aligned control implementation. Monitor OT security events and vulnerabilities. Participate in OT risk assessments. Support secure network segmentation initiatives. Security Compliance Assist in design and implementation of cybersecurity policies and standards. Support cybersecurity audits and assessments. Maintain operational evidence for compliance activities. Support implementation of NIST, ISO 27001, and IEC 62443 requirements. Reporting Prepare operational cybersecurity reports. Produce incident and vulnerability metrics. Maintain dashboards and KPI reporting. Provid