IT Security Officer

About the role

Lenovo is hiring an IT Security Officer. The role covers incident response, security monitoring, vulnerability management, security governance and compliance, and collaboration with IT teams and external vendors to protect on-premises and cloud environments.

Key responsibilities

• Track, manage and escalate cybersecurity incidents and critical threat events; conduct security awareness training for staff.
• Stay current with emerging threats and cloud platform vulnerabilities, and share advisories, threat intelligence and patch recommendations with stakeholders.
• Take part in tabletop exercises, risk management activities, audits and third-party assessments.
• Perform vulnerability assessments (Tenable Nessus) on applications, networks and devices, analyse scan results and track remediation.
• Monitor security events on SIEM tools (Splunk, Cortex, Exabeam), triage and analyse them.
• Onboard and scan devices before they connect to the corporate network, and review accounts regularly.
• Review security policies, standards and controls, recommend improvements after tabletop exercises and audits, and ensure CIS hardening compliance.
• Manage and optimise security tools and platforms, covering network, system, endpoint and runtime security in on-premises and cloud environments.
• Maintain security documentation, prepare regular reports on metrics, trends and compliance, and escalate incidents to management.
• Work with IT teams and vendors, and liaise with stakeholders and cloud providers on security-by-design and compliance.

Required profile

• Bachelor's degree in computer science, information technology, cybersecurity or a related field.
• Minimum 3 years of experience in security operations.
• Professional certification such as CISSP or CISM is required; cloud certifications (CCSP, AWS Certified Security, Azure Security Engineer Associate) are advantageous.
• Analytical, problem-solving and communication skills, able to work independently and in a team.

Required skills

• Hands-on experience with SIEM, WAF, AV, EDR, PAM and DAM tools.
• Vulnerability management, threat analysis and incident response processes.
• Secure network design, endpoint security and system hardening.
• Familiarity with ICT security compliance frameworks, IaC security (Terraform, CloudFormation) and CI/CD security.