Lead Information Security Engineer

Key Responsibilities:

• Security Architecture and Strategy: Design, implement, and maintain enterprise security architecture; develop and enforce security policies, standards, and best practices; evaluate and implement security tools and technologies to mitigate risks.
• Incident Response and Threat Management: Lead investigation and resolution of security incidents and breaches; develop and maintain incident response plans; perform threat modeling, vulnerability assessments, and penetration testing.
• Risk Management and Compliance: Conduct risk assessments and recommend mitigations; ensure compliance with regulatory frameworks (ISO 27001, NIST, GDPR, PCI DSS); collaborate with legal, compliance, and audit teams.
• Leadership and Team Development: Mentor and guide a team of security engineers and analysts; foster a culture of security awareness; integrate security into the DevSecOps lifecycle.
• Stakeholder Collaboration: Act as primary security liaison for executives, customers, and auditors; communicate security risks and recommendations to non-technical audiences; partner with product and engineering teams to embed security in all stages of development.