Key Responsibilities:
- Establishing and maintaining information security policies, standards, and procedures to meet requirements
- Conducting risk assessments on IT systems and projects to identify security vulnerabilities and compliance issues
- Leading implementation of security initiatives, collaborating with IT teams and managing vendor relationships
- Overseeing security operations, including event monitoring, vulnerability management, and tool optimization
- Investigating incidents, resolving them, and developing preventive measures
- Defining security processes, controls, and solutions to protect IT systems and data
- Providing technical expertise on cybersecurity threats and technology solutions
- Supervising and mentoring security team members for continuous improvement
- Executing other ad-hoc tasks as required
Qualifications:
- Bachelor's degree in Computer Science, IT, or related field
- Professional security certifications (e.g., CISSP, CISM) preferred
- Minimum 12 years' IT experience, with 6+ years in security/risk management
- Comprehensive technical knowledge across security domains
- Hands-on experience managing security tools (e.g., firewalls, SIEM, SASE)
- Understanding of security frameworks like ISO/IEC27001
- Proven track record in security incident response
- Excellent problem-solving, analytical, and communication skills
- Proactive, structured, and customer-oriented approach
- Ability to work collaboratively across teams
- Proficient in vendor management for successful project delivery