Responsabilities
- Develop, execute, and maintain a strategic, comprehensive corporate information security and IT risk management program.
- Assume responsibility for the security of systems and data against unauthorized access.
- Enterprise surveillance System, network, and security
- Define access rights, control structures, and resources to safeguard systems.
- Assess the present situation and evaluate trends to implement security enhancements.
- Conduct frequent audits and monitoring to identify security infractions and inefficiencies.
- Facilitate risk assessment and risk management procedures by working directly with business units.
- Create and improve a system for managing information security.
- Upgrade your periotic systems and firmware.
- Contracts and vendor discussions should be negotiated.
- Introduce suitable safeguards to protect sensitive documents and information from unauthorized access.
- Assist with overall corporate technology planning by offering current information and a vision of technology security systems in the future.
Person Requirements
- a track record of achievement in a comparable position in the field of information security
- Working knowledge of the following technologies/systems:
- Application Firewalls, Next-Generation Firewalls, IPSec, SSL-VPN, Open-VPN, StrongSwan URL Filtering
- DMARC/DKIM/SPF protocols and email security
- End Point Protection tools such as Imperva Cloud WAF and Layer-7 DDoS attack mitigation
- Layer 2/3 DNS Naming System and Nexus switches
- Prior risk assessment, security threat identification, and remedial action performance experience
- Capacity to react to incidents and provide a complete answer
- Ability to react to high-severity warnings 24 hours a day, 7 days a week
- Management of ISMS System, policies, and compliance documents
- Experience with Azure and AWS Cloud Security, as well as certifications such as CISSP, OSCP, and CCNP, will be considered a bonus.
- It will be advantageous if you have prior understanding of standard information security management frameworks such as ISO/IEC 27001, PCI DSS, and NIST.
Compensation and Benefits
- The chosen applicant will be awarded a competitive salary and benefits package.
- The company's group medical plan, a discount card program, and sponsorship for work-related training and professional examinations are all part of the benefits package.