Purpose

InfoSec (Information Security) aims to protect digital information from unauthorized access, use, disclosure, modification, or destruction.

The primary goal is to ensure digital information's confidentiality, integrity, and availability. Confidentiality refers to the protection of sensitive information from unauthorized access or disclosure. Integrity refers to the accuracy and completeness of digital information, ensuring that it has not been altered or destroyed. Availability refers to the accessibility of digital information when it is needed.

The role of InfoSec professionals involves implementing security measures such as firewalls, intrusion detection systems, encryption, access controls, and vulnerability assessments. They also develop policies and procedures for employees to follow to ensure the security of digital information.

Essential Duties

• Developing and implementing security policies and procedures
• Conducting risk assessments and implementing controls to mitigate identified risks
• Managing and monitoring access to sensitive information
• Ensuring compliance with relevant laws and regulations
• Providing security awareness training to employees
• Responding to security incidents and implementing incident response plans
• Regularly testing and updating security measures
  
  

Qualifications

Education: A degree in Computer Science, Information Technology, or a related field is often required for InfoSec roles. Applicants with relevant certifications or experience is a plus

Communication Skills: Need to have strong communication skills to be able to explain technical concepts to non-technical people and to work collaboratively with teams

Experience: Preference will be given to candidates with at least 3-5 years of experience in information security or related fields

Skills Set Mandatory

Technical Skills: Need to have a good understanding of network security, cryptography, security protocols, and software development. They should be familiar with common operating systems, such as Windows, Linux, and Unix, and be able to use security tools like firewalls, intrusion detection systems, and penetration testing tools

Certifications: Candidates with certifications such as Certified Information Systems Security Professional (CISSP), (CEH), Red Hat Certified System Administrator (RHCSA), and CompTIA Security+ are preferred