Maintaining robust IT security across evolving cloud platforms and digital infrastructures is at the heart of the Senior IT Con (Security) role. This position exists to strengthen the security posture of a major educational and public sector organisation, ensuring that cloud environments such as Microsoft Azure, Amazon Web Services (AWS), Google Cloud, and Huawei Cloud remain resilient against emerging cyber threats. By leading key security initiatives, the successful candidate will directly influence the organisation’s ability to safeguard sensitive information, support compliance with regulatory requirements, and foster a security-aware culture amid rapid technological change.

The Senior IT Con (Security) reports to the Lead IT Consultant and acts as a pivotal security advisor within the Communications & Information Technology division. This role requires close collaboration with IT infrastructure teams, application developers, business owners, and compliance units to provide comprehensive security consultancy and assurance for diverse systems and platforms. A significant aspect of the role involves conducting thorough security reviews, vulnerability assessments, penetration testing, and secure code evaluations to identify risks and drive effective remediation strategies.

Day-to-day responsibilities revolve around managing end-to-end IT security processes, from policy development to incident investigation. The successful applicant will develop, review, and update security policies, procedures, and plans that align with internationally recognised frameworks such as NIST CSF, ISO27001, and ISO27005, as well as local regulatory standards. They will proactively handle cybersecurity alerts and threat intelligence, investigating root causes of incidents and leading containment efforts to minimise impact. Managing security operation centre (SOC) vendors and implementing advanced log and security monitoring tools will also form a critical part of this role.

In addition to technical and operational duties, the Senior IT Con (Security) plays a key role in driving security awareness and training programmes within the organisation. This includes orchestrating phishing simulation exercises and incident response drills that educate staff on current and evolving cyber risks. Researching new technologies and emerging vulnerabilities will inform continuous improvements to the organisation’s defensive capabilities, ensuring readiness against sophisticated attack vectors.

This role is firmly anchored in an onsite working environment, reflecting the need for close collaboration with technical and business teams. It is a permanent position that places a strong emphasis on maintaining and enhancing security across cloud and infrastructure systems that underpin critical educational services and public-sector functions.

Candidates considered for this role will typically hold a bachelor’s degree in Computer Science, Information Technology, or a closely related field, supported by at least six years of hands-on experience in information and cyber security. Proven expertise across cloud security platforms—including Microsoft 365 and various SaaS environments—is essential. Familiarity with a wide range of security technologies such as EDR/XDR, Data Access Management, Mobile Device Management, Microsoft Azure Information Protection, Cloud Access Security Broker solutions, and zero-trust architectures will enable effective management of diverse security challenges.

Professional certifications such as CISSP, CISA, CISM, CREST, CEH, or CHFI are advantageous, highlighting a commitment to continuous professional development. The ability to interpret complex security data and communicate findings clearly to all organisational levels, including senior executives and board members, is vital for driving informed security decisions and sustaining stakeholder confidence.

Key technical and professional competencies include:

– Deep understanding of security standards and regulatory frameworks like MTCS, CAS Security-by-Design, PDPA, ISO31000, and PCI-DSS
– Advanced skills in managing vulnerability assessment processes, penetration testing, and secure code reviews
– Experience working alongside compliance teams to track and manage information security risks
– Capability to lead security projects, procurement processes, and service renewals in the IT security space

This Senior IT Con (Security) role offers the chance to apply specialist expertise within a complex technology environment supporting the broader mission of an organisation dedicated to education management within the public sector. The successful candidate will play a critical role in maintaining resilient IT security operations that support and protect this essential service.