IT Security Lead

Responsibilities:

• Security Architecture & Strategy
• Design, integrate, and maintain end-to-end security architecture for on-premises and cloud environments
• Ensure secure network topology including segmentation, access control, and VPN tunnels
• Lead development and enforcement of security policies, procedures, and best practices
• Work closely with developers and IT architects to embed security into application and infrastructure design
• SOC, SIEM, and Threat Management
• Manage endpoint protection through EDR and threat-hunting solutions
• Manage and enhance email security systems to protect against phishing, malware, and spam, ensuring compliance with organizational security policies
• Lead incident response efforts and develop threat prevention strategies
• Application and Cloud Security
• Supervise vulnerability scanning and penetration testing for internally developed applications
• Governance, Risk & Compliance (GRC)
• Drive cybersecurity-related compliance programs.
• Lead cross-functional GRC initiatives and support internal/external audits
• Manage security risk assessments and recommend mitigation strategies
• Documentation & Collaboration
• Maintain detailed documentation for security controls, policies, systems, and incidents
• Work collaboratively with software engineers, network teams, and business units

• Requirements

Minimum Qualifications

• Education: Bachelor's degree in Engineering, Computer Science, Information Security, Cybersecurity, or a related discipline.
• Experience: Minimum of 4 years of hands-on experience in cybersecurity, information security, or related technical security roles.

Technical Expertise Demonstrated experience and proficiency in:

• Designing and implementing security architectures for hybrid cloud and on-premises environments.
• Deploying, managing, and optimizing security technologies, including:
• Firewalls
• Web Application Firewalls (WAF)
• Endpoint Detection and Response (EDR)
• Security Information and Event Management (SIEM)
• Unified Threat Management (UTM)
• Intrusion Prevention Systems (IPS)
• Secure Web Proxies
• Distributed Denial-of-Service (DDoS) protection and mitigation solutions
• Network security design and operations, including security protocols, network segmentation, subnetting, VPN technologies, and access control models.
• Assessing security risks and implementing appropriate controls to safeguard enterprise systems, applications, and data.