Lead and manage the Cybersecurity function, providing technical direction and guidance to the security team.
Develop, implement, and continuously improve cybersecurity policies, procedures, standards, and security controls.
Develop and maintain a comprehensive cybersecurity roadmap and security improvement plan aligned with business requirements.
Monitor and manage security technologies including XDR/EDR, SIEM, Firewalls, IDS/IPS, Email Security, MFA, and Vulnerability Management solutions.
Lead the monitoring, investigation, and response to security events and cybersecurity incidents.
Establish and maintain effective Incident Response processes and procedures.
Conduct regular vulnerability assessments, risk assessments, security reviews, and remediation follow-ups.
Ensure secure configuration and hardening of servers, endpoints, network devices, applications, and cloud services.
Manage Identity and Access Management (IAM), privileged access, MFA, and access control policies.
Work closely with IT Infrastructure, Network, Systems, Applications, and IT Service Management teams to embed security throughout the IT environment.
Lead cybersecurity requirements for new technologies, systems, applications, and infrastructure projects.
Coordinate with external security vendors, managed security service providers, ISPs, and cybersecurity partners.
Ensure cybersecurity controls and processes comply with applicable security standards, regulations, and internal policies.
Support and continuously improve Business Continuity and Disaster Recovery security requirements.
Conduct cybersecurity awareness programs and promote security best practices across the organization.
Prepare and present cybersecurity KPIs, risk dashboards, incident reports, vulnerability reports, and management recommendations.
Lead cybersecurity projects and initiatives from planning through implementation and continuous improvement.
Monitor emerging cyber threats, vulnerabilities, attack techniques, and cybersecurity technologies and recommend appropriate security measures.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electronics & Communications Engineering, or a related field.
3-7 years of overall cybersecurity experience, including at least 1 year in a senior, supervisory, or leadership role.
Strong hands-on experience in enterprise cybersecurity operations and security infrastructure.
Strong knowledge of:
Network & Endpoint Security
Firewalls & VPN
EDR / XDR
SIEM & Security Monitoring
Vulnerability Management
Identity & Access Management
MFA & Privileged Access Management
Incident Response
Security Hardening
Risk Management
Security Awareness
Hands-on experience with security technologies such as Fortinet, Microsoft Security, EDR/XDR, SIEM, MFA, or equivalent solutions.
Good knowledge of Microsoft 365, Active Directory, Azure / Entra ID, Windows Server, Networking, and Cloud Security.
Good understanding of Linux and Docker security.
Strong understanding of cybersecurity frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.
Experience in developing security policies, procedures, controls, and risk management practices.
Strong leadership, analytical, communication, and problem-solving skills.
Ability to manage multiple security incidents, projects, risks, and priorities in a fast-paced environment.