. Conduct in-depth analysis of existing information systems, business processes, and technical infrastructure to identify opportunities for improvement and optimization.
. Evaluate the organization's IT environment to identify vulnerabilities, assess risks, and develop strategies to mitigate security threats.
. Collaborate with IT architects and engineers to design and implement secure information systems, networks, and applications.
. Ensure that the organization complies with relevant regulations and industry standards, such as GDPR, HIPAA, ISO 27001, and NIST, by developing and maintaining security policies and procedures.
. Develop and maintain incident response plans and procedures to address security incidents promptly and effectively.
. Promote security awareness and training programs for employees to educate them about security best practices.
. Utilize security tools and technologies to monitor and protect the organization's network and systems, such as intrusion detection systems (IDS), firewalls, antivirus software, and encryption.
. Develop and maintain a risk management program to identify and prioritize security risks and implement measures to mitigate them.
. Coordinate and participate in security audits, vulnerability assessments, and penetration testing to validate the effectiveness of security controls.
. Maintain comprehensive documentation of security policies, procedures, configurations, and incident reports.
. Collaborate with cross-functional teams, including IT, legal, compliance, and business units, to ensure a holistic approach to information security.
. Stay updated with the latest security threats, trends, and technologies, and recommend improvements to security policies and practices accordingly.
. Bachelor's degree in Computer Science, Information Technology, or a related field (Master's degree preferred).. 4+ years of experience in the same field only will be considered.. Certified Information Systems Security Professional (CISSP) certification.. Several years of experience in systems analysis and information security.. In-depth knowledge of security standards, protocols, and best practices.. Strong understanding of risk management, compliance, and audit processes.. Excellent communication and interpersonal skills.. Problem-solving and critical-thinking abilities.. Strong project management skills.. Ability to work both independently and as part of a team.