The first step towards security is to choose a hosting company who takes care all security measures. E.g. SiteGround hosting is highly secure, they offer daily free backup, regular server upgrades etc. Besides that, you can install a WordPress security plugin like Wordfence.