IT and Website Security Coordinator

Job Title: IT and Website Security Coordinator

Expected Start date: ASAP

Job Role Overview:

To support Virtual Elves' high standards of cyber and web security by overseeing IT coordination, ensuring ongoing compliance with device and security frameworks, and managing all technical aspects of WordPress and other websites associated with Virtual Elves operations. This role is critical for training, incident response coordination, security monitoring, and maintaining the integrity of multiple WordPress sites.

Job Responsibilities

• Cybersecurity Training & Awareness (Primary)
• Share monthly security bulletins/alerts and develop short "security tip" content for the team to share with VA and client communities.
• Advise team members on up-to-date security threats and best preventative practices relevant for remote work.
• Track, report, and escalate any compliance gaps or training non-completions.
• Background Checks & Professional Standards (Primary)
• Manage regular re-verification cycles and maintain secure digital records.
• Help ensure contractor agreements, NDAs, and professional conduct standards related to cybersecurity are met.
• Contract Security (Primary)
• Provide feedback on security language and keep templates updated in line with evolving regulations.
• Liaise with legal counsel if issues or questions about digital security or privacy protections arise.
• System Access Control & Performance Monitoring (Coordination)
• Maintain onboarding "Access Control Checklists" for all new VAs/clients to support least-privilege and strong-authentication practices.
• Periodically audit user permissions, ensuring timely offboarding steps and appropriate user access for all client systems and websites.
• Monitor and report on access compliance and coordinate periodic reviews of security incident logs.
• Incident Response & Security Coordination (Coordination)
• Serve as the first point of contact for incident reports—triage, document, and escalate based on the incident playbook.
• Manage the centralised incident response channel and ensure all VAs/clients have access to emergency procedures.
• Lead "post-incident" reviews and facilitate security tabletop exercises.
• Multi-Factor Authentication & Network Security Guidance (Guidance)
• Assist with the creation of user-friendly guides and short videos for MFA setup, troubleshooting, and backup/recovery.
• Act as the support resource for MFA and network security queries from VAs and clients.
• Provide quarterly reminders and checklists for home network/router security best practices.
• Device Security & Compliance Standards (Standards)
• Enforce a device security minimum baseline for all VAs (OS updates, disk encryption, antivirus, screen lock, etc.).
• Administer annual security audits (self-certification/evidence collection).
• Stay up to date on new device security threats and evolving security frameworks. Recommend changes as needed.
• Advanced WordPress & Site Security Management
• Maintain and update all company/linked WordPress sites to the highest security standard (plugins, themes, core updates).
• Implement and review user roles/permissions—least privilege and strong password/2FA enforcement.
• Regularly back up and audit sites, malware scan, and respond to security alerts.
• Configure/manage security plugins (e.g., Wordfence, Sucuri, iThemes Security).
• Oversee SSL, CDN, Web Application Firewall (WAF), and DNS-level protections.
• Provide support for website downtime/troubleshooting and coordinate with hosting providers or developers if needed.
• Document and continuously improve WordPress/website security policies.

Qualifications

• Minimum 3 years' experience in IT support, cyber or website security, with strong remote collaboration capability.
• Proven hands-on experience managing and securing WordPress sites (advanced user roles, plugin configuration, backups, incident response).
• Demonstrable knowledge of cybersecurity threats, CIS Controls or similar framework, and up-to-date home office security best practices.
• Ability to create security training materials, run checklists, and support non-technical users.
• Strong understanding of access control, MFA, device hardening, and emergency response protocols.
• Excellent written and verbal English communication skills; client-facing professionalism.
• Trustworthiness and ability to handle confidential, sensitive data.
• Preferred Experience
• WordPress security certifications (e.g., WP Security Ninja, iThemes).
• CompTIA Security+/similar cybersecurity certification.
• Experience training/coaching remote team members or end users.
• Familiarity with managing web hosting, DNS, WAF, and SSL.
• Knowledge of privacy laws affecting offshore/remote teams.

If you're ready to take on your next remote opportunity, we'd love to hear from you. Send your CV to

Job Type: Full-time

Work Location: Remote