IT Security Lead

Responsibilities:

• Security Architecture & Strategy

• Design, integrate, and maintain end-to-end security architecture for on-premises and cloud environments

• Ensure secure network topology including segmentation, access control, and VPN tunnels

• Lead development and enforcement of security policies, procedures, and best practices

• Work closely with developers and IT architects to embed security into application and infrastructure design

• SOC, SIEM, and Threat Management

• Manage endpoint protection through EDR and threat-hunting solutions

• Manage and enhance email security systems to protect against phishing, malware, and spam, ensuring compliance with organizational security policies

• Lead incident response efforts and develop threat prevention strategies

• Application and Cloud Security

• Supervise vulnerability scanning and penetration testing for internally developed applications

• Governance, Risk & Compliance (GRC)

• Drive cybersecurity-related compliance programs.

• Lead cross-functional GRC initiatives and support internal/external audits

• Manage security risk assessments and recommend mitigation strategies

• Documentation & Collaboration

• Maintain detailed documentation for security controls, policies, systems, and incidents

• Work collaboratively with software engineers, network teams, and business units

Requirements

• Requirements

  Minimum Qualifications

  • Education: Bachelor's degree in Engineering, Computer Science, Information Security, Cybersecurity, or a related discipline.

  • Experience: Minimum of 4 years of hands-on experience in cybersecurity, information security, or related technical security roles.

  Technical Expertise

  Demonstrated experience and proficiency in:

  • Designing and implementing security architectures for hybrid cloud and on-premises environments.

  • Deploying, managing, and optimizing security technologies, including:

    • Firewalls

    • Web Application Firewalls (WAF)

    • Endpoint Detection and Response (EDR)

    • Security Information and Event Management (SIEM)

    • Unified Threat Management (UTM)

    • Intrusion Prevention Systems (IPS)

    • Secure Web Proxies

    • Distributed Denial-of-Service (DDoS) protection and mitigation solutions

  • Network security design and operations, including security protocols, network segmentation, subnetting, VPN technologies, and access control models.

  • Assessing security risks and implementing appropriate controls to safeguard enterprise systems, applications, and data.