Senior hands-on role responsible for managing, optimising, and strengthening cybersecurity controls across on-prem and cloud environments. Focus on proactive monitoring, control tuning, and measurable risk reduction.
Owns and improves key platforms including firewalls, CASB, email security, WAF, PAM, vulnerability management, Azure security, and IAM. Supports protection of critical payment and treasury systems, strengthens access governance via ServiceNow, enhances privileged access controls, and improves detection capability.
Key Focus
- Network security (Palo Alto, FortiGate, VPN, segmentation)
- Web and CASB
- Email security
- Vulnerability management
- IAM and access governance
- PAM
- Cloud security and conditional access
- Monitoring, detection, and security reporting
Responsibilities
- Manage and optimise firewalls, CASB, email security, WAF, and cloud controls
- Review rules, eliminate risks, and improve configurations
- Drive vulnerability remediation within SLAs
- Govern access via ServiceNow, enforce least privilege, and manage JML lifecycle
- Administer PAM, monitor privileged activity, and conduct access reviews
- Support SSO integrations and strengthen conditional access
- Tune alerts, support investigations, and improve detection
- Track metrics, reporting, and continuous risk reduction
- Automate tasks using PowerShell or Python
Experience & Skills
- 5–7 years in cybersecurity operations
- Experience with ServiceNow for access governance
- Exposure to regulated or financial environments preferred
- Strong knowledge of IAM, PAM, and security frameworks (ISO 27001, NIST)
- Scripting and automation capability
- Strong analytical, documentation, and communication skills
Qualifications
- Bachelor's degree in a relevant field
- Preferred certifications: Palo Alto or Fortinet, Microsoft Security, ITIL, ISO 27001, CISSP
