Job Description:

Summary: The candidate will be responsible for developing cybersecurity strategy, designing and implementing policies, standards, guidelines to protect the organization's information assets from cyber threats. The position holder should have expertise in cybersecurity tools, processes, and methodologies and support incident response activities.

Responsibilities:
• Analyze and assess risks against business operations, recommend mitigation strategies, and monitor effectiveness of risk reduction plans.
• Implement security measures to safeguard information within network systems by ensuring all new hardware, software, and equipment are brought into compliance with established standards.
• Develop, implement, and maintain network security policies, procedures, and associated training plans to ensure awareness and understanding among employees.
• Establish and maintain active participation in system development life cycle (SDLC) projects involving network infrastructures.
• Maintain effective communication with other members of the IT team, management, and external parties involved in system projects or incidents.
• Prepare and deliver executive-level reports on project status, special studies, and proposals.
• Work closely with internal customers to identify needs and resolve problems.
• Ensure compliance with relevant laws, regulations, and industry standards related to cybersecurity.
• Provide guidance and mentorship to junior security professionals.

Qualifications:
• Minimum Bachelor’s degree in Computer Science, Information Technology, or related field; advanced certification such as CISSP, CISM, CEH, etc., would be preferred.
• Experience in working with security frameworks like NIST, ISO27001, PCI DSS, GDPR, etc.
• Strong knowledge of network protocols, security controls, encryption algorithms, firewalls, intrusion detection/prevention techniques, access control models, and network segmentation concepts.
• Familiarity with security assessment tools and techniques including scanning and testing of networks and applications for vulnerabilities.
• Proficiency in using various operating systems including Windows, Linux, UNIX, and macOS.
• Hands-on experience with security technologies such as SIEM, IDS/IPS, DLP, WAF, VPN, and EDR solutions.
• Knowledge of cloud security principles and best practices.
• Understanding of threat intelligence, Incident Response Plan (IRP), and Disaster Recovery Plans (DRP).
• Excellent problem-solving and analytical skills.
• Effective communicator with strong interpersonal skills.
• Ability to work independently and as part of a team.
• Willingness to participate in afterhours support when required.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:

Employment Type:

-------

Experience Level:

Job Family: