IT Security Specialist

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Safeguard Fika’s systems, applications, computers, networks, and data against security breaches, cyber threats, and unauthorized access.

• Monitor systems for vulnerabilities and implement effective security measures.

• Address security alerts, incidents, and threats promptly.

• Uphold the confidentiality, integrity, and availability of Fika's systems and data.

• Assist in the development, testing, and ongoing enhancement of business continuity and disaster recovery plans.

• Identify, assess, and document information security risks for both new and existing systems and applications.

• Suggest security controls and measures to mitigate identified risks.

• Support organization-wide risk management practices across various departments.

• Implement, maintain, and enhance SIEM, EDR, antivirus, and intrusion detection and prevention systems.

• Conduct vulnerability assessments and penetration tests.

• Maintain security documentation and reports, providing regular updates to the Senior IT Manager.

• Develop and deliver information security awareness training for current employees and new hires.

• Formulate, implement, and uphold information security policies, standards, and procedures.

• Ensure staff adherence to information security policies and regulatory requirements.

• Assist with annual internal and external information security audits.

• Design and implement Fika’s IT Security Roadmap, including addressing findings from the GRF cybersecurity audit.

• Establish and secure firewalls, VPNs, LANs, and wireless networks in program-country offices.

• Review firewall rules and network security configurations, continuously monitoring network activity.

• Ensure that laptops, tablets, and mobile devices comply with security policies, including mobile device management, patch management, and disk encryption.

• Secure Fika’s Microsoft 365, Google Workspace, Azure, AWS, Box, and Salesforce environments.

• Collaborate with IT teams on cloud identity and access management.

• Monitor emerging cybersecurity threats, vulnerabilities, and security technologies.

• Assist in the development, implementation, testing, and maintenance of business continuity and disaster recovery plans.

• Participate in disaster recovery testing to ensure critical systems can be restored within agreed recovery timelines.

• Support Fika Cybersecurity Incident Response Procedures.

⛳️ Requirements

• Bachelor's Degree in Computer Science, Information Security, or a related IT field.

• 3+ years of practical experience in IT security, network security, or a similar role.

• Strong knowledge of network protocols, firewalls, VPNs, and encryption technologies.

• Experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection platforms.

• Familiarity with operating systems, including Windows and macOS.

• Knowledge of cloud environments, including AWS, Azure, and GCP.

• Understanding of established security frameworks and global compliance standards.

• Strong analytical and problem-solving abilities.

• Excellent communication skills, capable of conveying technical concepts to non-technical stakeholders.

• Relevant certifications such as CompTIA Security+, CISSP, CEH, CISA, CISM, or GIAC certifications (preferred).

• Experience with scripting/automation (preferred).

• Background in incident response and digital forensics (preferred).

• Experience in the international development or NGO sectors (preferred).

• A motivation letter limited to one page is required.

• CV limited to 2 pages, showcasing relevant diplomas, degrees, and recognized certifications.

• CV must omit personal information and non-certified training.

🏝️ Benefits

• Flexible work arrangements.

• Comprehensive mental and physical wellness support.

• Annual salary reviews in alignment with Fika’s compensation policy.

• Opportunities for professional advancement.

• Targeted development programs.

• Reasonable accommodations provided during the hiring and employment processes.