Infrastructure & Security Officer

Bank ABC wishes to recruit an Infrastructure & Security Officer  within our Information Technology Department at our Tunisian Branch.

Job Summary:

The Infrastructure & Security Officer is responsible for ensuring the security, integrity, and compliance of the organization's IT systems and infrastructure. The role focuses on identifying, monitoring, tracking, and remediating security vulnerabilities and compliance findings across Production, Test, and UAT environments. Working closely with the Information Security team and infrastructure teams, the IT Security Officer ensures the timely implementation of corrective actions and adherence to corporate security standards and regulatory requirements.

Job Requirements & Knowledge: 

Security Operations & Vulnerability Management

• Monitor, track, and report security vulnerabilities identified through security assessments, vulnerability scans, compliance reviews, and continuous monitoring activities.

• Analyze security findings and coordinate remediation efforts with Infrastructure, Application Support, third-party vendors, and Group IT Infrastructure teams.

• Implement security fixes, patches, hardening measures, and configuration changes on servers, endpoints, network devices, and infrastructure components.

• Ensure security vulnerabilities and compliance findings are remediated within agreed timelines and service level objectives.

• Validate the effectiveness of remediation actions through verification and follow-up assessments.

• Monitor system integrity, security baselines, and configuration compliance across the IT environment.

• Support security monitoring activities and ensure adherence to corporate security policies and standards.

• Participate in security audits, compliance reviews, risk assessments, and remediation programs.

• Escalate critical security risks, incidents, and compliance issues to the Infrastructure Manager and Head of IT.

• Maintain accurate documentation of vulnerabilities, remediation plans, corrective actions, exceptions, and operational procedures.

• Maintain regular communication with the Information Security team regarding remediation progress, risk status, and compliance requirements.

Infrastructure Operations

• Support the administration, maintenance, and security of servers, operating systems, network infrastructure, and related services.

• Perform routine operational checks to ensure the availability, performance, reliability, and stability of IT systems.

• Participate in infrastructure maintenance activities, technology refresh initiatives, and system upgrades.

• Assist in implementing infrastructure changes in accordance with change management and security procedures.

• Support backup, disaster recovery, and business continuity activities.

• Maintain technical and operational documentation related to infrastructure services and security controls.

• Contribute to continuous improvement initiatives aimed at enhancing infrastructure resilience, performance, and security.

User Support & Security Services

• Provide Level 2 support for security-related user requests, including access management, authentication issues, certificate management, privileged access requests, and secure remote access solutions.

• Assist end users in adopting cybersecurity best practices and secure use of corporate IT resources.

• Participate in security awareness and cybersecurity education initiatives.

• Support investigations related to security incidents, suspicious activities, and access violations.

• Collaborate with IT support teams to ensure security requirements are integrated into daily operational activities.

Reporting & Governance

• Prepare periodic reports and dashboards on vulnerabilities, remediation status, compliance metrics, and security risks.

• Track remediation KPIs and provide regular updates to management and Information Security stakeholders.

• Ensure compliance with internal policies, Group security standards, regulatory requirements, and audit recommendations.

The IT Security Officer operates within the IT Department and works closely with the Information Security team, Infrastructure teams, Application Support teams, third-party vendors, and Group IT stakeholders. The role is responsible for ensuring the security and compliance of the local IT environment through proactive vulnerability management, remediation of security and audit findings, and implementation of security controls.

The position requires continuous coordination with internal and external stakeholders to ensure timely resolution of security risks, compliance gaps, and audit observations while maintaining the availability, integrity, and confidentiality of IT systems and services. The role also acts as a key point of contact for security-related operational matters, supporting infrastructure activities, user security services, and regulatory compliance initiatives.

Technical Skills required

• Windows and Linux Server Administration.

• Active Directory, DNS, DHCP, and Group Policies.

• Endpoint Management.

• Patch Management and System Hardening.

• Virtualization Technologies.

• Network Fundamentals (TCP/IP, VLANs, VPNs, Firewalls).

• Backup and Recovery Administration.

• IT Service Management and Incident Handling.

• Vulnerability Management and Remediation.

• Infrastructure Security and Compliance Monitoring.

• System Integrity Monitoring.

• Security Baseline and Configuration Management.

Soft Skills required

• Strong analytical and troubleshooting skills.

• Good communication and interpersonal abilities.

• Strong organizational and follow-up capabilities.

• Customer service oriented.

• Ability to manage multiple priorities effectively.

• Proactive and result-oriented mindset.

• Strong sense of accountability and ownership.

• Ability to work collaboratively with cross-functional teams.

Certifications (Considered an Advantage)

• ITIL Foundation.

• Certifications related to vulnerability management, infrastructure security, or compliance monitoring.

Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity, or a related field.

Minimum 3 years of experience in IT Infrastructure, Systems Administration, Technical Support, or Information Security.