Responsibilities

• Manage and harden Sophos XGS firewall — rules, IPS, web/app

control

• Monitor SIEM, investigate incidents, and execute response plans

• Conduct vulnerability scans and track remediation to closure

• Microsoft 365 security — Defender, Exchange Online Protection,

DLP, Purview

• Enforce VPN controls, MFA, and least-privilege access policies

• Manage endpoint protection (EPP/EDR) and SSO/identity health

• Respond to internal/external audits; maintain SOPs and baselines

• Produce security reports and 90-day roadmaps for management

• Adhere to NCA Cybersecurity Controls