IT Security Manager

Brief Summary

We are looking for a skilled IT Security Manager to spearhead the execution of our IT security strategies across both cloud and on-premises platforms. This pivotal role involves collaborating with various teams to enhance our cybersecurity framework.

Responsibilities

• Collaborate with internal IT teams and external partners to monitor and respond to cybersecurity threats. Lead Security Incident Response efforts and conduct post-incident analyses to improve security protocols. Stay abreast of emerging threats and vulnerabilities associated with cloud technologies. Share security advisories, threat intelligence updates, and patch recommendations with relevant stakeholders. Participate in tabletop exercises, risk management activities, audits, and third-party assessments to prepare for incidents. Monitor security events and perform triage using SIEM tools (e.g., Splunk, Cortex, Exabeam). Conduct Vulnerability Assessments on various applications, networks, and computing devices. Perform regular security reviews to ensure compliance with IT Security Policies and industry best practices. Suggest and implement security enhancements based on audit findings and tabletop exercise outcomes. Manage and optimize security tools for effective integration within the IT infrastructure. Maintain documentation for security incidents, assessments, and compliance status. Prepare reports detailing security performance, incident trends, and risk mitigation efforts. Offer mentorship to IT Security Officers and coordinate with IT teams and vendors on security measures. Act as a liaison with stakeholders to align security practices with organizational strategies.

Requirements

• Bachelor's degree in information security, Computer Science, or a related field. A minimum of 5 years of experience in an IT Security leadership role, with at least 1 year focusing on cloud security. Hands-on experience with security tools (e.g., SIEM, WAF, AV, EDR, PAM). In-depth knowledge of vulnerability management, threat analysis, and incident response. Familiarity with secure network design, endpoint security, and system hardening techniques. Understanding of ICT security compliance frameworks and risk management practices. Knowledge of Infrastructure as Code (IaC) security solutions, such as Terraform and CloudFormation. Preferred certifications include CISSP or CISM, with cloud certifications like CCSP or AWS Certified Security advantageous.