IT Security Specialist YOSH HOSPITALITY

About the Role

We are looking for a skilled and proactive IT Security Specialist to enhance the company’s and clients’ cybersecurity posture. You will play a vital role in safeguarding electronic information and ICT systems by implementing strong security controls, identifying threats, and responding to incidents. If you’re passionate about threat detection, risk management, and driving security awareness, this is the role for you.

Key Responsibilities

• Execute day-to-day IT security operations including threat prevention, detection, and remediation.
• Stay updated with current threat intelligence and initiate appropriate incident response actions.
• Ensure timely resolution of security incidents in line with service level agreements (SLAs).
• Implement IT risk management strategies and security controls across systems and networks.
• Lead internal security awareness initiatives including training, advisory communications, and phishing simulations.
• Assess security gaps in technologies and processes to help shape the security solutions roadmap.
• Manage and deliver cybersecurity projects and solution implementations.
• Conduct internal audits and facilitate external audits to ensure compliance with security standards.
• Develop, implement, and maintain IT security standards, policies, and procedures.
• Perform additional duties as assigned by the direct manager.

Qualifications & Certifications

• Bachelor’s Degree or Advanced Diploma in Computer Science, Computer Engineering, IT, or a related field.
• Certification in one or more of the following is highly preferred:
• CompTIA Security+ / CySA+
• SSCP, CISSP, CISA, CISM, OSCP, CEH
• Additional certifications (advantageous):
• Microsoft Azure Security Certifications (e.g., AZ-500, SC-300, SC-900)
• ITIL, vendor-specific solutions, or other cybersecurity standards

Work Experience

• Minimum of 3 years of hands-on cybersecurity experience, particularly in:
• Data loss prevention & information classification
• Identity and privileged access management
• SIEM, SOAR, UEBA, SOC operations
• Cloud & email security
• Network segmentation, firewalls (NGFW), WAF, PKI, VPN, NAC
• Vulnerability management & ethical hacking
• Compliance with security standards

Technical Knowledge

• LAN/WLAN/WAN/SD-WAN infrastructure
• Microsoft Active Directory & Group Policies
• Windows Server, desktop OS, Android, iOS, MacOS
• Cloud environments (Azure, Microsoft 365)
• Familiarity with frameworks such as OWASP, MITRE ATT&CK®, CIS Benchmarks
• Knowledge of ISO27001, NIST, NESA compliance standards

We are an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.