DGM Sr Manager IT Security
DGM Sr Manager IT Security
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
The Information and Cyber Security Engineer is responsible for implementing and maintaining the organizations information security Posture. This role involves developing and maintaining security policies standards and procedures as well as ensuring the integration of security controls across all technology and business processes. The role will collaborate with crossfunctional teams to establish and
Must Be CISM / CISSP / CISA CEH certified
Provide securityrelated input to the Infrastructure and Operations teams processes deployments changes etc.
Develop/deploy/administer/support/remediate security tools and processes to meet business requirements.
Troubleshoot and remediate errors/failures related to security events applications network storage and so forth. Perform root cause analysis for major events.
Assist in the development of secure architecture guidelines for the cloud networks systems and endpoints.
Managing Application Security SCA SAST DAST IAST RASP and Penetration Testing.
Must Be CISM / CISSP / CISA CEH certified
Determines baseline security configuration standards for operating systems (e.g. OS hardening) network segmentation and identity and access management (IAM)
Handson experience with vulnerability management tools and strong technical understanding and experience assessing vulnerabilities and identifying weaknesses in multiple cloud multiple operating system platforms database and application servers.
Familiar with cloudbased enterprise security technologies. (AWS Azure GCP)
Experience of the deployment and support of security products within the M365 security.
Implementing hardening of cloud environments and implementing adequate security policies.
Reviewing and evaluating currently used tools and policies/procedures/standards from the security area in the context of cloud migration identifying gaps and adaptation
Security Posture and Design: Risk Assessment:
Conduct regular risk assessments to identify potential vulnerabilities and threats.
Provide recommendations for risk mitigation and risk acceptance.
Security Framework:
Develop implement and maintain an effective information security framework.
Ensure alignment with industry standards and regulatory requirements.
Security Controls:
Design and implement security controls and solutions to safeguard information assets.
Evaluate and select security technologies to meet organizational needs.
Policy and Procedure Development:
Security Policies:
Develop and maintain information security policies standards and guidelines.
Ensure policies are communicated understood and adhered to across the organization.
Compliance:
Monitor and enforce compliance with relevant laws regulations and industry standards.
Assist in audit preparations and responses.
Collaboration and Training:
Crossfunctional Collaboration:
Collaborate with IT legal compliance and other departments to address security requirements.
Provide security consultation for projects and initiatives.
Training and Awareness:
Develop and deliver security training programs for employees.
Promote a securityaware culture throughout the organization.
Incident Response and Governance:
Incident Response Planning:
Develop and maintain an incident response plan.
Participate in incident response activities including investigations and documentation.
Governance and Reporting:
Provide regular security status reports to executive leadership.
Contribute to the development and maintenance of security governance structures.
Required Experience:
Director
Employment Type
Full-Time
