IT Security Specialist / Senior Specialist

About the role

Unifree Duty Free is looking for an experienced IT Security Specialist to protect its extensive retail environment across multiple airports and border gates. You will join a dynamic team responsible for safeguarding critical systems, data, and infrastructure in a fast‑paced, multicultural setting.

Key responsibilities

• Operate, monitor, and continuously improve security tools and controls (PAM, SIEM, EDR/EPP, DLP, vulnerability scanners).
• Detect and respond to security events, coordinating incident response with IT teams.
• Drive remediation of vulnerabilities, penetration‑test findings, audit issues, and risk‑assessment actions from identification to closure.
• Support compliance with ISO/IEC 27001, PCI DSS, PDPL and other regulatory frameworks.
• Collaborate with infrastructure, network, system, application and business teams to maintain and enhance security controls.

Required profile

• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or a related field.
• Minimum 4 years of experience in information security, cybersecurity or IT security.
• Hands‑on experience with core security technologies and a solid understanding of servers, networks, endpoints, virtualization platforms, enterprise applications and cloud environments.
• Experience in SOC/NOC operations, incident response and security event handling.
• Working knowledge of security standards such as ISO/IEC 27001, PCI DSS and NIST.
• Proven ability to produce and maintain security policies, procedures, standards and operational guidelines.
• Strong troubleshooting, problem‑solving and documentation skills with good written and spoken English.
• Completed military service for male candidates.

Required skills

• Privileged Access Management (PAM)
• Security Information and Event Management (SIEM)
• Endpoint Detection and Response / Endpoint Protection Platform (EDR/EPP)
• Data Loss Prevention (DLP)
• Vulnerability scanning tools
• Server, network and endpoint infrastructure
• Virtualization and cloud platforms
• SOC/NOC operations and incident response
• ISO/IEC 27001, PCI DSS, NIST frameworks
• Audit, risk assessment, compliance and vulnerability management processes