Job Title

Key Deliverables in this roleFinancial OutcomesThis role contributes to the organization's overall financial well-being by minimizing the impact of security incidents, reducing the risk of financial losses, and ensuring compliance with regulations to avoid penalties.Customer ServiceImplementing measures for ongoing enhancement of security services, ensuring customer satisfaction and confidence in the Cyber capabilitiesWork with the broader IT organization and business management to align priorities and plans with key business objectives.Provide security communication awareness and training for audiences which may range from senior leaders to individual contributors.Work with IT leadership and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program.Internal ProcessesRecommend and facilitate the implementation of technical controls to support and enforce defined security policiesConduct and report on risk assessments and propose meaningful plans to protect the businessManage security projects and provide expert guidance on security matters for other technology projectsAssessment and ongoing management of vendors applications and other third-party risksWork to ensure ongoing alignment with Audit and Compliance requirements as identified by the businessAssist in the development and ongoing management of IT budgets and assess the ROI of existing security measures.Conduct and/or oversee periodic security auditsAssist with the development and facilitation of enterprise Disaster Recovery and Business Continuity programsResponsible for working in a 24x7 Security Operation Center (SOC) environmentPart of an on-call escalation processInnovation and LearningResearch, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software and analyze its impact on the existing environmentCritical success factors for the Role12-14 years’ experience in Information Security DomainBachelor’s degree in information security, Computer Science, or a related field. Relevant certifications (e.g., CISSP, CISM, GIAC) are a plus.Subject Matter Expert in information security DomainThird Party Risk AssessmentEffective Incident Response and ManagementVulnerability Management & Penetration TestingContinuous Monitoring and AnalysisDesirable success factors for the Role Strong understanding of security technologies, threat detection, and incident handling.Leadership experience with the ability to manage and mentor a team.Proficiency in SIEM tools (Microsoft Sentinel) and other security technologies.Excellent communication and stakeholder management skills.Knowledge of security policies, compliance standards, and best practices.Strong problem-solving and decision-making abilities.Innovation and Emerging Technology AwarenessThreat Hunting CapabilitiesIncident Simulation and Tabletop Exercises