Responsible for developing, implementing, and maintaining enterprise-level information security strategies to protect organizational systems, networks, and data. Ensures compliance with regulatory requirements and industry standards, conducts risk assessments, and coordinates incident response efforts.
Key Responsibilities:
- Design and implement security architectures for on-prem and cloud environments
- Perform vulnerability assessments across systems and applications
- Manage and monitor SIEM, EDR, WAF, VPN, IAM, Endpoint protection and MDM tools
- Develop and enforce security policies, standards, and best practices
- Conduct regular security audits and compliance checks (e.g., ISO 27001, NCA ECC, GDPR)
Skills & Tools:
- SIEM (e.g., Splunk, QRadar), EDR (e.g., CrowdStrike, SentinelOne)
- IAM (e.g., Azure AD, Okta), VPN, Firewalls, WAF (e.g., Airlock, FortiWeb)
- ISO 27001, NIST, CIS controls
- Risk assessment tools, MDM, email security gateways
Requirements
- Bachelor's degree in Information Technology, Computer Science, or related field
- 7+ Years Experience
- Certified or have the knowledge on SIEM, EDR, WAF, VPN, IAM, Endpoint protection and MDM tools
- Certification related to Security tools or relevant
