POSITION PRIMARY PURPOSE
We are seeking a highly skilled and experienced IT Information Security Lead to join our team. The ideal candidate will be responsible for developing, implementing, and enforcing IT security policies, procedures, and technologies to protect our organization's information systems and data. This role requires in-depth knowledge of firewall tools and settings, BYOD policies and enforcement, endpoint security, identity and access management, Microsoft Intune, Security Operations Center (SOC) practices, and other relevant security measures.
JOB DESCRIPTION
1. Policy Development and Enforcement
- Develop and implement IT security policies, procedures, and guidelines to ensure the organization's systems and data are protected against threats and vulnerabilities.
2. Risk Management
- Identify potential security risks, conduct regular risk assessments, and implement measures to mitigate those risks.
3. Network Security
- Configure and manage firewall tools and settings to protect the network from unauthorized access and cyber threats.
4. Incident Response
- Monitor and respond to security incidents, including malware infections, data breaches, and other security events, ensuring timely resolution.
5. Compliance and Auditing
- Ensure compliance with industry standards, regulations, and best practices.
- Conduct regular security audits and assessments to identify and address weaknesses, including regular VAPT tests, with the ability to review and assess the results.
6. Cyber Security Training and Awareness
- Provide training and awareness programs to employees on IT security best practices, promoting a security-conscious culture within the organization.
- Devise and conduct phishing campaigns and track security awareness ratings for continuous improvement across the organization.
7. Security Operations Center (SOC)
- Work closely with vendors and partners on SOC activities, including monitoring and analyzing security events, coordinating incident response efforts, and maintaining the organization's security posture.
8. Mobile Device Management (MDM)
- Implement and manage MDM solutions, such as Microsoft Intune, to ensure secure access and protection of mobile devices and laptops used within the organization.
9. Bring Your Own Device (BYOD) Policies
- Develop and enforce BYOD policies to ensure personal devices used by employees meet security standards and do not pose risks to the organization's network.
- Assess and implement the necessary tools to enforce these policies while ensuring smooth system performance.
10. Threat Intelligence and Research
- Stay up to date with the latest security threats, trends, and technologies.
- Conduct research and analysis to continuously improve the organization's security measures.
11. Collaboration
- Work closely with other departments to ensure security measures are integrated into all business processes and systems.
- Assess and review systems and potential products before deployment to Production.
12. Vendor Management
- Manage relationships with security vendors and service providers to ensure the organization has access to the best security solutions and support.
JOB QUALIFICATIONS
1. Educational Background
- Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
2. Professional Experience
- Relevant Experience: 5–7 years of professional experience in IT security roles, with a proven track record in policy development, enforcement, and incident management.
- Leadership Experience: Demonstrated experience leading a small team and managing IT security projects.
3. Technical Skills
- Firewall Management: Proficiency in configuring and managing firewall tools and settings.
- Mobile Device Management (MDM): Experience with MDM solutions such as Microsoft Intune.
- Security Operations Center (SOC): Familiarity with SOC practices and technologies.
- Network Security: In-depth knowledge of network security principles and technologies.
- BYOD Policies: Experience developing and enforcing Bring Your Own Device (BYOD) policies.
- Incident Response: Skills in monitoring and responding to security incidents and vulnerabilities.
4. Certifications
Industry certifications are preferred, including:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CEH (Certified Ethical Hacker)
- CompTIA Security+
- Other relevant security certifications are also welcome.
5. Soft Skills
- Analytical Skills:Strong problem-solving and analytical abilities to identify and mitigate security risks and determine root causes, especially during investigations.
- Communication Skills: Excellent verbal and written communication skills to effectively convey security policies and procedures at all organizational levels.
- Interpersonal Skills: Ability to collaborate and work effectively with other departments and stakeholders.
- Attention to Detail: High level of accuracy and attention to detail in managing security protocols and incidents.
6. Other Qualifications
- Continuous Learning: Commitment to staying up to date with the latest IT security trends, threats, and technologies.
- Project Management: Strong project management skills to oversee security initiatives and ensure completion on time and within budget.
- Trustworthiness and Integrity: Demonstrates integrity, good judgment, and the ability to handle sensitive information with confidentiality.
- Communication: Able to clearly communicate with supervisors, peers, team members, vendors, and other stakeholders while conveying ideas concisely and effectively.
COMPLIANCE
1. Understand, support, and implement the Company's Quality Policy and his/her section quality objectives.
2. Always maintain confidentiality to protect the privacy of customers.
3. Follow company policies and procedures without exception and maintain zero accidents on his/her area.
4. Identify and report problems to immediate superior in a timely manner.
5. Complete all tasks and projects by pre-determined deadlines. 6. Proactively communicate with the immediate superior.
