This group performs some or all of the following duties:

• Confer with clients to identify and document requirements, assess physical and technical security risks to data, software and hardware
• Apply encryption protocols, and manage keys to ensure security of data is maintained while at rest and in transit
• Monitor access and credentials for information and systems
• Install, test and operate security software and tools such as anti-virus and automated threat detection/prevent systems to ensure security measures are in place and working as intended
• Monitor for cyber attacks, intrusions and unusual, unauthorised or illegal activity
• Plan and carry out security measures in response to cybersecurity events and incidents in accordance with an organization’s incident response plan to protect information, data and systems
• Document computer security and emergency measures policies, procedures, and tests.

Employment requirements

A bachelor’s degree in computer science, computer security, computer systems engineering, information systems or completion of a college program in information technology, network administration or other computer science related program is usually required.

Certification or training provided by software vendors may be required by some employers.