Description

responsibilities:

• Implement, enhance, and continuously improve cybersecurity across the firm

• Evaluate the security capabilities and perform risk assessment of internal applications, 

consult stakeholders on residual risks, and propose mitigation strategies. 

• Work closely with teams across Infrastructure, Cybersecurity Operations, and 

Governance to ensure compliance with best practices. 

• Contribute to application and infrastructure projects, defining security models and 

promoting proactive security measures. 

• You will ensure IT System compliance with various internal and external policies (e.g., 

regarding IT, quality, information security, legal and data privacy regulation). 

• Managing security incidents. 

• Provide training to colleagues on cybersecurity subjects. 

• Be the interface between the business with their analytical demands and the IT groups 

implementing them. 

Education, Experience and Knowledge/Skills: 

Education: Hold an engineering or equivalent degree in information technology, computer 

science, or in a related field. 

Experience: 5-6 years of experience working in IT in cross-functional teams; especially in the 

areas of Cybersecurity & IT Compliance or worked predominately on Cybersecurity reviews and 

audit related topics in an operational function. 

Preferred Technical Skills/Process Knowledge: 

• Good knowledge and understanding of IT Applications.

• Candidate should be a subject matter expertise in application security best practices and 

implementation (e.g., security protocols, cryptography, authentication, authorization, 

hardening of operating systems, databases). 

• Candidate should have experience in determining security requirements by evaluating 

business Use case and requirements following a risk-based approach, and describe 

associated data flows and security controls needed, interacting with different 

stakeholders to explain and enforce security measures. 

• Candidate should be experienced in the following areas – ITIL, IT Service Management 

(ITSM), Project management, Agile methodologies. 

• Candidate should be knowledgeable in IT system architecture, Network security basics, 

SW Development Life cycle. 

• Knowledge of various IT Infrastructure areas Including multi cloud platforms (AWS, 

Azure, GCP etc) and Cloud Service Models: IaaS/PaaS/SaaS. 

• CISSP / ISO LA in 27001 / CompTIA Security+, cybersecurity related certifications will be 

an added advantage. 

Non-Technical Skills: 

• Strong analytical, technical, functional, critical thinking, and problem-solving skills. 

• High customer orientation and focus on Quality. 

• Team player with intercultural skills. 

• Ability to effectively work together with colleagues and partners around the globe. 

• Excellent communication and Presentation skills. 

• Fluent in English verbal and written communication

Key Skills

Education

Bachelor's degree