Cyber Security Control Operations Specialist

About the role

The Cyber Security Control Operations Specialist ensures that the organisation’s security controls are effective, resilient and aligned with risk appetite and regulatory expectations. By continuously monitoring and improving controls, the role protects critical assets, builds stakeholder confidence and enables the business to respond swiftly to emerging cyber threats.

Key responsibilities

• Monitor, test and validate the effectiveness of cybersecurity controls across enterprise systems and networks.
• Identify control gaps, assess associated risks and implement remediation measures.
• Maintain and update security control frameworks to meet regulatory and industry standards.
• Collaborate with cross‑functional teams to operationalise security policies and procedures.
• Support incident response by analysing control performance and recommending corrective actions.
• Conduct regular audits, reviews and reporting on control effectiveness for management and stakeholders.
• Provide technical expertise in deploying, configuring and maintaining security tools such as SIEM, SOAR, EDR and DLP.
• Drive continuous‑improvement initiatives to enhance control efficiency and adaptability.
• Develop and deliver training or awareness sessions on security control practices.
• Stay current with emerging threats, technologies and regulatory changes to proactively adjust operations.

Required profile

• Bachelor’s degree in cyber security, information technology, computer science or a related field.
• 5+ years of progressive experience in cybersecurity with a strong hands‑on focus.
• Relevant certifications such as CEH, GPEN, CASP+, OSCP or GCIH are desired.
• Deep knowledge of NIST, ISO 27001, CIS Controls and other compliance frameworks.
• Proven ability to align enterprise controls with industry standards.

Required skills

• Deployment and configuration of SIEM, SOAR, EDR and DLP solutions.
• Threat‑intelligence platform integration and analysis.
• Advanced vulnerability scanning and penetration‑testing methodologies.
• Risk prioritisation and remediation planning.
• Securing multi‑cloud environments (AWS, Azure, GCP) including IAM, encryption, monitoring and compliance.