Officer/Associate Manager, System Security and Risks

Contribute to the organization's information security strategy by developing and maintaining security policies, standards, procedures, awareness programs, risk assessments, and incident response capabilities.

Design and review secure cybersecurity architectures and provide security recommendations for business and technology initiatives.

Support secure digital transformation programs by evaluating, implementing, and managing next-generation security technologies and solutions.

Administer and optimize enterprise security solutions, including XDR (Extended Detection and Response), DLP (Data Loss Prevention), Network Behavior Analytics (NBA/NDR), Sandboxing, Email Security Gateway, Mobile Device Management (MDM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA/2FA), Hard Disk Encryption, Vulnerability Management Platforms, SIEM, Threat Intelligence, and Endpoint Security solutions.

Conduct security assessments, vulnerability assessments, penetration testing (VAPT), configuration reviews, and security compliance reviews to identify and mitigate risks.

Perform continuous risk assessments, security reviews, and control effectiveness evaluations aligned with industry standards and regulatory requirements.

Support compliance initiatives related to ISO 27001, NIST, PCI-DSS, OWASP, COBIT, and other applicable security frameworks.

Manage cybersecurity vendors and third-party service providers, including solution evaluation, implementation oversight, performance monitoring, and risk assessments.

Stay current with emerging cyber threats, vulnerabilities, attack techniques, and security technologies, and recommend appropriate remediation measures.

Collaborate with IT, business, and project teams to ensure security requirements are integrated throughout the system and application lifecycle.

Prepare security reports, dashboards, and management presentations, and perform other cybersecurity-related duties as assigned.