RESPONSIBILITIES:

• Develop and implement security measures to protect digital assets and ensure compliance with relevant regulations and standards.
• Conduct periodic vulnerability assessments and penetration tests on internal applications and websites.
• Lead a team to deliver efficient security operations across multiple locations.
• Perform technical evaluations of new security solutions and provide feedback to the team.
• Develop and manage integrated incident response procedures and security awareness programs.
• Expertise in setting up and monitoring Microsoft Sentinel for threat analytics and event management.
• Prepare and publish risk-based security scorecards, enterprise risk assessments, and compliance reports for senior management.
• Vulnerability assessment.
• Implement and maintain technical security controls such as Endpoint Detection and Response (EDR), Security Operations Center (SOC), Digital Risk Protection (DRP), and Network Access Control (NAC).
• Collaborate with regulators, vendors, and internal teams to address identified vulnerabilities and ensure compliance with regulatory requirements.
• Conduct periodic audits and provide evidence for compliance with industry standards such as ISO 27001, PCI-DSS, ADHICS, and SOC 2 Type 2.
• Provide strategic direction for information security initiatives and ensure alignment with business goals.

REQUIREMENTS:

• Extensive experience in Information Security, Web and Network Pentesting, Incident Response, Vulnerability Assessment & Management, SIEM, Threat Intelligence, and Threat Hunting.
• Strong interpersonal skills, including excellent communication abilities and the capacity to mentor junior staff.
• Proficiency with security tools such as Nessus, Burp Suite, Nmap, Tenable Nessus, Metasploit, Proofpoint Email Security, ARCON PAM, Digital Shadows, Securonix, SentinelOne, and more.
• Experience with SIEM platforms such as LogRhythm, Securonix, Exabeam, and FortiSIEM.
• Implement and configure Azure Sentinel.
• Hands-on experience with EDR solutions including SEP, SentinelOne, CrowdStrike, Carbon Black, and Falcon.
• Knowledge of data privacy and security standards including GDPR, ISO 27001, PCI-DSS, ADHICS, and SOC 2 Type 2.
• Ability to conduct forensic analysis using tools such as Passware Kit and Encase Forensic Imager.
• Proficiency in risk management tools like vsRisk, ARM, and ISO Manager.
• Experience in leading security projects from conception to operational phase, including design, architecture, implementation, and testing of security systems.