Information Security Officer

About the role

The Information Security Officer will lead QSE’s efforts to protect its information assets by designing, implementing and monitoring a comprehensive security programme. Reporting to the Director of Risk Management, the role focuses on technical security controls, risk assessment and incident response across the organisation.

Key responsibilities

• Establish and maintain a corporate‑wide information security management programme aligned with regulatory and industry standards.
• Develop, update and enforce security policies, procedures and technical standards.
• Identify, assess and mitigate IT security risks; conduct regular risk assessments and gap analyses.
• Design, implement and review security architecture, firewalls and network protections.
• Plan and execute penetration tests, vulnerability assessments and manage patch‑management processes.
• Monitor real‑time threats, triage incidents and lead incident‑response activities.
• Support disaster‑recovery planning, test backup and recovery procedures, and ensure business continuity.
• Provide security awareness training and collaborate with business stakeholders to embed risk‑aware practices.

Required profile

• Proven experience in information security, risk management and compliance within a regulated environment.
• Strong understanding of government and industry security regulations.
• Ability to design and enforce security policies and technical standards.
• Excellent communication skills for stakeholder engagement and training.

Required skills

• Firewall management and security architecture design.
• Penetration testing and vulnerability assessment.
• Patch management and system hardening.
• Incident response and security monitoring.
• Risk assessment and mitigation.
• Disaster recovery planning and backup testing.