Infocomm TechnologyInformation and communications technology professionalsISCO 2529
ICT security administrator
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
About ICT security administrator
As an ICT security administrator, you will be responsible for protecting an organization's information systems and data from unauthorized access, cyber attacks, and malicious threats. Your role requires comprehensive knowledge of network security, system architecture, and emerging cyber threats, combined with the ability to implement proactive security measures and respond swiftly to incidents. You will design and maintain security protocols, manage user access controls, conduct security audits, implement backup systems, and ensure compliance with security policies and industry standards. Your day-to-day responsibilities include monitoring network activity, analyzing security vulnerabilities, managing mobile devices and endpoint security, and developing strategies to counter cyber attacks. As an ICT security administrator, you are a critical safeguard for organizational assets and must stay current with evolving threat landscapes and security technologies. With cybersecurity threats escalating globally and Polish organizations increasingly targeted by sophisticated attacks, demand for skilled security administrators is high, offering excellent career prospects, competitive salaries, and opportunities to work on cutting-edge security challenges.
Key Work Functions
Core areas of responsibility for a ICT security administrator.
1
Security Infrastructure and Architecture Design
- Design and implement comprehensive ICT network security architecture
- Manage ICT data architecture and database security configurations
- Implement security engineering principles and best practices
- Configure operating systems and network standards for security compliance
2
Threat Detection and Incident Response
- Identify and analyze ICT network security risks and vulnerabilities
- Develop and execute cyber attack counter-measures and mitigation strategies
- Apply ethical hacking principles to test security systems
- Monitor ICT systems for suspicious activity and security breaches
3
Access Control and Compliance Management
- Manage IT security compliances and regulatory requirements
- Apply company security policies and organizational resilience standards
- Manage mobile device security and endpoint protection systems
- Implement and maintain user access controls and authentication systems
4
System Maintenance and Quality Assurance
- Establish and maintain system backup best practices and disaster recovery procedures
- Attend to ICT systems quality and performance standards
- Perform ICT troubleshooting and solve system problems systematically
- Apply quality assurance methodologies to security testing and validation
5
Documentation and Technical Communication
- Interpret technical texts and security standards documentation
- Create comprehensive security policies and technical documentation
- Communicate security risks and recommendations to management and stakeholders
European Skills Framework
Skills and knowledge areas required for this occupation based on European classification.
Essential (25)
ICT safetyICT safetyPersonal protection, data protection, digital identity protection, security measures, safe and sustainable use.ethical hacking principlesethical hacking principlesThe set of actions that are carried out to detect vulnerabilities within a computerised system in order to improve security within an organisation. They aim to identify and address data breaches and t...ICT network security risksICT network security risksThe security risk factors, such as hardware and software components, devices, interfaces and policies in ICT networks, risk assessment techniques that can be applied to assess the severity and the con...system backup best practicesystem backup best practiceThe procedures related to preparing for recovery or continuation of technology infrastructure vital to an organisation.internet governanceinternet governanceThe principles, regulations, norms and programs that shape the evolution and use of internet, such as internet domain names management, registries and registrars, according to ICANN/IANA regulations a...cyber attack counter-measurescyber attack counter-measuresMethods, technologies and techniques used to defend (detect, monitor and recover) against cyber attacks. These cyber attacks include several attack vectors such as malware, denial of service (DoS) att...security engineeringsecurity engineeringInterdisciplinary field of study that focuses on the realisation of secure systems and the technology to protect individuals or information from malice, errors, or unauthorized access. It involves def...organisational resilienceorganisational resilienceThe strategies, methods and techniques that increase the organisation's capacity to protect and sustain the services and operations that fulfil the organisational mission and create lasting values by ...database development toolsdatabase development toolsThe methodologies and tools used for creating logical and physical structure of databases, such as logical data structures, diagrams, modelling methodologies and entity-relationships.quality assurance methodologiesquality assurance methodologiesQuality assurance principles, standard requirements, and the set of processes and activities used for measuring, controlling and ensuring the quality of products and processes.mobile device managementmobile device managementThe methods for managing the use of mobile devices within an organisation, while ensuring security.network standardsnetwork standardsRegulated standards that provide the technical guidelines, specifications, and requirements to ensure safe and efficient interoperability between devices, software, equipment, and organisations. Netwo...operating systemsoperating systemsThe features, restrictions, architectures and other characteristics of operating systems such Linux, Windows, MacOS, etc.manage IT security compliancesmanage IT security compliancesGuide application and fulfilment of relevant industry standards, best practices and legal requirements for information security.apply company policiesapply company policiesApply the principles and rules that govern the activities and processes of an organisation.manage ICT data architecturemanage ICT data architectureOversee regulations and use ICT techniques to define the information systems architecture and to control data gathering, storing, consolidation, arrangement and usage in an organisation.perform ICT troubleshootingperform ICT troubleshootingIdentify problems with servers, desktops, printers, networks, and remote access, and perform actions which solve the problems.attend to ICT systems qualityattend to ICT systems qualityEnsure correct operations which comply fully with specific needs and outcomes in terms of the development, integration, security and overall management of ICT systems.interpret technical textsinterpret technical textsRead and understand technical texts that provide information on how to perform a task, usually explained in steps.solve ICT system problemssolve ICT system problemsIdentify potential component malfunctions. Monitor, document and communicate about incidents. Deploy appropriate resources with minimal outage and deploy appropriate diagnostic tools.maintain ICT identity managementmaintain ICT identity managementAdminister identification, authentication and authorisation of individuals within a system and control their access to resources by associating user rights and restrictions with the established identi...ensure proper document managementensure proper document managementGuarantee that the tracking and recording standards and rules for document management are followed, such as ensuring that changes are identified, that documents remain readable and that obsoleted docu...identify ICT system weaknessesidentify ICT system weaknessesAnalyse the system and network architecture, hardware and software components and data in order to identify weaknesses and vulnerability to intrusions or attacks. Execute diagnostic operations on cybe...maintain database securitymaintain database securityMaster a wide variety of information security controls in order to pursue maximal database protection.Internet of ThingsInternet of ThingsThe general principles, categories, requirements, limitations and vulnerabilities of smart connected devices (most of them with intended internet connectivity).
Optional (33)
computer forensicscomputer forensicsThe process of examining and recovering digital data from sources for legal evidence and crime investigation.cloud security and compliancecloud security and complianceCloud security and compliance concepts, including shared responsibility model, cloud access management capabilities, and resources for security support.ICT security standardsICT security standardsBest practices and guidelines established for securing information and communication technology (ICT) systems and data. Standards as is the case of ISO 27000 series, provide a framework for implementi...ICT security legislationICT security legislationThe set of legislative rules that safeguards information technology, ICT networks and computer systems and legal consequences which result from their misuse. Regulated measures include firewalls, intr...telecom regulationstelecom regulationsCode of rules to protect telecommunication consumers, ensuring high standards of communication services such as equivalent and affordable access, connectivity, transparency of contracts or security ag...cyber securitycyber securityThe methods and best practices that protect ICT systems, networks, computers, devices, services, processes and people against unauthorised access, modification and/or denial of service of assets.cloud monitoring and reportingcloud monitoring and reportingThe metrics and alarms utilizing cloud monitoring services, in particular performance and availability metrics.web application security threatsweb application security threatsThe attacks, vectors, emergent threats on websites, web applications and web services, the rankings of their severity identified by dedicated communities such as OWASP.information confidentialityinformation confidentialityThe mechanisms and regulations which allow for selective access control and guarantee that only authorised parties (people, processes, systems and devices) have access to data, the way to comply with ...ICT infrastructureICT infrastructureThe system, network, hardware and software applications and components, as well as devices and processes that are used in order to develop, test, deliver, monitor, control or support ICT services.ICT encryptionICT encryptionThe conversion of electronic data into a format which is readable only by authorized parties which use key encryption techniques, such as Public Key Infrastructure (PKI) and Secure Socket Layer (SSL).assess ICT knowledgeassess ICT knowledgeEvaluate the implicit mastery of skilled experts in an ICT system to make it explicit for further analysis and usage.implement ICT security policiesimplement ICT security policiesImplement statements, assertions or rules that specify the appropriate use and protection of the ICT assets and systems from an organisation. These ICT security policies cover topics such as data clas...manage databasemanage databaseApply database design schemes and models, define data dependencies, use query languages and database management systems (DBMS) to develop and manage databases.protect personal data and privacyprotect personal data and privacyProtect personal data and privacy in digital environments. Understand how to use and share personally identifiable information while being able to protect oneself and others from damages. Understand t...respond to incidents in cloudrespond to incidents in cloudTroubleshoot issues with the cloud and determine how to restore operations. Design and automate disaster recovery strategies and evaluate a deployment for points of failure.use scripting programminguse scripting programmingUtilise specialised ICT tools to create computer code that is interpreted by the corresponding run-time environments in order to extend applications and automate common computer operations. Use progra...store digital data and systemsstore digital data and systemsUse software tools to archive data by copying and backing them up, in order to ensure their integrity and to prevent data loss.remove computer virus or malware from a computerremove computer virus or malware from a computerCarry out actions to remove computer viruses or other types of malware from a computer.execute software testsexecute software testsPerform tests to ensure that a software product will perform flawlessly under the specified customer requirements and identify software defects (bugs) and malfunctions, using specialised software tool...implement a virtual private networkimplement a virtual private networkCreate an encrypted connection between private networks, such as different local networks of a company, over the internet to ensure that only authorized users can access it and that the data cannot be...manage ICT virtualisation environmentsmanage ICT virtualisation environmentsOversee tools, such as VMware, kvm, Xen, Docker, Kubernetes, and others, used to enable a virtual environments for different purposes such as hardware virtualization, desktop virtualisation, and opera...address problems criticallyaddress problems criticallyIdentify the strengths and weaknesses of various abstract, rational concepts, such as issues, opinions, and approaches related to a specific problematic situation in order to formulate solutions and a...implement anti-virus softwareimplement anti-virus softwareDownload, install and update software to prevent, detect and remove malicious software, such as computer viruses.implement cloud security and complianceimplement cloud security and complianceImplement and manage security policies and access controls on cloud. Differentiate between the roles and responsibilities within the shared responsibility model.perform backupsperform backupsImplement backup procedures to backup data and systems to ensure permanent and reliable system operation. Execute data backups in order to secure information by copying and archiving to ensure integri...manage cloud data and storagemanage cloud data and storageCreate and manage cloud data retention. Identify and implement data protection, encryption, and capacity planning needs.build business relationshipsbuild business relationshipsEstablish a positive, long-term relationship between organisations and interested third parties such as suppliers, distributors, shareholders and other stakeholders in order to inform them of the orga...lead disaster recovery exerciseslead disaster recovery exercisesHead exercises which educate people on what to do in case of an unforeseen disastrous event in the functioning or security of ICT systems, such as on recovery of data, protection of identity and infor...train employeestrain employeesLead and guide employees through a process in which they are taught the necessary skills for the perspective job. Organise activities aimed at introducing the work and systems or improving the perform...implement a firewallimplement a firewallDownload, install and update a network security system designed to prevent unauthorized access to a private network.manage keys for data protectionmanage keys for data protectionSelect appropriate authentication and authorization mechanisms. Design, implement and troubleshoot key management and use. Design and implement a data encryption solution for data at rest and data in ...execute ICT auditsexecute ICT auditsOrganise and execute audits in order to evaluate ICT systems, compliance of components of systems, information processing systems and information security. Identify and collect potential critical issu...
Related Occupations
Other occupations in the Other category that share similar skill requirements.
AI Replacement Risk
81/ 100
Very High Risk
Low riskHigh risk