Information Security - Sr. Executive

Position Reporting to

Chief Technology Officer

Behavioral Competencies Required

• Be Honest and Trustworthy
• Be respectful & possess cultural awareness and sensitivity
• Professional
• Team Leader and Player
• Be Collaborative

Functional Competencies Required

Technical:

• Network and System Security: Familiarity with conducting internal security audits, ensuring compliance with regulatory standards, and managing security certifications (e.g., SOC 2, ISO 27001)
• Vulnerability Management and Penetration Testing: Proficiency in identifying vulnerabilities in networks, systems, and applications through manual and automated vulnerability assessments. Experience with penetration testing tools to identify weaknesses and provide recommendations for remediation.
• Security Configuration and Hardening: Proficiency in implementing security controls and hardening configurations for operating systems, applications, and databases
• Security Monitoring and Threat Intelligence: Ability to deploy and configure monitoring tools to detect anomalous activities across the enterprise network.
• Cloud Security: Expertise in securing cloud environments, including managing access controls, network security, and compliance within public and private cloud platforms.
• Security Standards, Policies, and Procedures: Knowledge of security standards and frameworks such as ISO 27001, NIST, PCI DSS, and GDPR, and the ability to implement them in day-to-day security operations

Role & Responsibilities

• Disaster Recovery and Business Continuity Planning- Knowledge of disaster recovery and business continuity planning with a focus on securing critical infrastructure and ensuring system availability during disruptions
• Risk Management and Threat Assessment- Identify, assess, and prioritize information security risks and vulnerabilities within the organizations IT infrastructure, networks, and applications
• Security Architecture and Infrastructure Oversight - Oversee the design, implementation, and maintenance of security infrastructures, including firewalls, intrusion detection systems (IDS), encryption protocols, and secure communication tools.
• Continuous Improvement- Stay up to date with the latest cyber security trends, vulnerabilities, and attack vectors