Information Security Lead

Job Description for Information Security Lead:

Roles and Responsibilities

• Monitor computer networks for security issues.
• Investigate security breaches and other cybersecurity incidents.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Document security breaches and assess the damage they cause.
• Implement penetration testing along with ethical hacking.
• Fix detected vulnerabilities to maintain a high-security standard.
• Stay current on IT security trends and news.
• Help colleagues install security software and understand information security management.
• Research security enhancements and make recommendations to management.
• Stay up-to-date on information technology trends and security standards.
• Revise and analyse IT operations and systems, hardware configurations, physical security and operating procedures across organization.
• Consult and comply with set controls, standards, policies and procedures while carrying out IT activities.
• Search technology and reduce risks in every information security segment.
• Suggest measures to improve IT related procedures, operations, processes and systems throughout organization.
• Suggest and execute IT technologies, strategies and policies to guard customer’s information assets.
• Implement security risk analysis for current and new systems to find system weaknesses or disclosures.
• Recommend solutions for explaining risks and reducing exposure areas.
• Prepare security program plans and execute IT controls, processes, audit tools, interfaces and utilities for authentication.
• Perform as chief for audits and security aspects (ISO 27001).
• Support and provide consultancy for audit compliance actions.
• Implement periodic, on-demand project audits plus vulnerability analysis.
• Determine compliance through user accounts, application usage, system file and outside scans.
• Perform independently in team implementing security and privacy engagements.
• Review client networks and applications.
• Compliance with industry standards such as ISO 27001, NIST-800-53, CIS.
• Supporting audits related to security.
• Hands on ISO 27001.
• Experience of IAM.
• Experience with computer network penetration testing and techniques.
• Understanding of firewalls, proxies, SIEM, antivirus and IDPS concepts.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.

Requirements

Required Skills :

• Fluent ENGLISH, both verbal and spoken
• 5+ years of experience in information security or related field.
• Vulnerability Management full cycle
• Developing, implementing, and monitoring compliance with security baselines
• Security patch management full cycle for OS, databases and applications
• Security incident management full cycle
• Hands on ISO 27001.
• Experience of IAM.Experience with computer network penetration testing and techniques.
• Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.