Security Specialist \"End Point, DLP and Data mgmt

Primary purpose of the role The Security specialist is responsible for the administration of the organization's information and data security policies and practices to ensure authorized users can readily access information and that the information is protected in terms of confidentiality, integrity and availability. Well follow security best practices guideline. In this role, need to handle all responsibility as following mentioned.

Drafts and maintains the policy, standards, procedures, and documentation for security. Monitors the application and compliance of security operations procedures and reviews information systems for actual or potential breaches in security. Ensures that all identified breaches in security are promptly and thoroughly investigated. Ensures that any system changes required to maintain security are implemented. Ensures that security records are accurate and complete.

Obtains and acts on vulnerability information and conducts security risk assessments for business applications and computer installations; provides authoritative advice and guidance on security strategies to manage the identified risk. Investigates major breaches of security and recommends appropriate control improvements. Interprets security policy and contributes to development of standards and guidelines that comply with this. Performs risk assessment, business impact analysis and accreditation for all major information systems within the organization.

Ensures proportionate response to vulnerability information, including appropriate use of forensics.

• Consider future aims and goals of the team/unit and organization when prioritizing own and others' work
• Initiate, priorities, consult on and develop team/unit goals, strategies, and plans
• Anticipate and assess the impact of changes, such as government policy/economic conditions, on team/unit objectives and initiate appropriate responses
• Ensure current work plans and activities support and are consistent with organizational change initiatives
• Evaluate achievements and adjust future accordingly

• Demonstrate a sound understanding of technology relevant to the work unit, and identify and select the most appropriate technology for assigned tasks
• Identify opportunities to use a broad range of communications technologies to deliver effective messages
• Understand, act on and monitor compliance with information and communications security and use policies
• Identify ways to leverage the value of technology to achieve team/unit outcomes, using the existing technology of the business
• Support compliance with the records, information, and knowledge management requirements of the organization

• Develop, implement, and manage security policies and protocols for endpoint devices including desktops, laptops, mobile devices, and servers.
• Technical hands-on experience with endpoint security
• Understanding of operating system, networking protocols, security and Internet environments
• Experience with systems installation, configuration and administration of operating systems and applications
• Experience installing, configuring and integrating a security environment
• Experience using application firewalls, SIEM, IDS/IPS etc.
• Experience with common enterprise desktop software deployment methodologies
• Design and enforce strategies to prevent the unauthorized transmission of sensitive information. Monitor and analyze data flows to identify and mitigate potential data breaches.
• Act as a first responder to security incidents involving endpoint devices and data leaks. Conduct thorough investigations, document findings, and recommend remediation actions.
• Continuously monitor security threats and vulnerabilities related to endpoints. Stay updated on the latest security trends and threat intelligence to proactively protect the organization.
• Collaborate with IT and compliance teams to develop and maintain endpoint security policies, standards, and guidelines. Ensure compliance with industry regulations and best practices.
• Manage and optimize security tools and technologies such as antivirus software, EDR, XDR, encryption solutions, and DLP systems. Ensure they are effectively configured and updated.
• Generate regular reports on the status of endpoint security and data leak…