It Support Executive

Job Summary

Responsible for managing patching activities, vulnerability remediation, security incident handling. The role ensures adherence to security standards, regulatory requirements, and organizational security policies while reducing cybersecurity risks across the IT infrastructure.

Key Responsibilities

1. Patch Management & Follow-ups

• Plan, coordinate, and monitor monthly and emergency patch deployments across endpoints, and network devices.
• Validate patch applicability and assess potential business impact before deployment.
• Track patch compliance and ensure adherence to organizational security policies and SLAs.
• Coordinate with Infrastructure, Application, and Business teams for patch implementation.
• Maintain patch deployment schedules, reports, and dashboards.
• Follow up with application owners and infrastructure teams on overdue patches and remediation activities.
• Perform post-patching validation and ensure successful deployment.

2. Vulnerability Management

• Act on vulnerability assessments reports from tools Rapid7 shared by corporate security team.
• Analyse vulnerability scan results and prioritize remediation based on risk, CVSS score, and business criticality.
• Collaborate with system owners and technology teams to remediate identified vulnerabilities.
• Track remediation progress and verify vulnerability closure.
• Generate periodic vulnerability management reports and risk dashboards for management.
• Support compliance and audit requirements related to vulnerability management.

3. Security Incident Management

• Monitor and respond to security incidents, alerts, and events.
• Perform triage, investigation, containment, eradication, and recovery activities.
• Coordinate with SOC, Infrastructure, and Application teams during security incidents.
• Document incident findings, root cause analysis (RCA), and lessons learned.
• Escalate critical incidents as per defined incident response procedures.
• Ensure security incidents are closed on or before defined SLA.
• Support SIEM monitoring and security tools management.
• Participate in incident response drills and tabletop exercises.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field.
• 3-8 years of experience in Cyber Security, Vulnerability Management, or Security Operations.
• Strong knowledge of Windows, Linux, and Network Security.
• Experience with vulnerability management tools (Qualys, Tenable, Rapid7, Nessus).
• Knowledge of patch management solutions such as SCCM, WSUS, ManageEngine, etc.
• Understanding of security frameworks such as NIST, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Experience with SIEM platforms such as Microsoft Sentinel, Splunk.
• Strong analytical, troubleshooting, and communication skills.