Threat Detection and Vulnerability Management

- Monitor and analyze security event logs in real-time to identify potential security threats & vulnerabilities

- Conduct comprehensive vulnerability assessments and penetration testing to identify security weaknesses & prioritize remediation efforts

-Identify, classify, and mitigate vulnerabilities in systems, applications & infrastructure to minimize risk

Security Incident Management and Response

- Develop, implement, and maintain incident response plans to ensure timely & effective response to security breaches and incidents

-Manage and respond to security incidents, ensuring root cause analysis, containment & remediation to minimize business impact.

-Collaborate with IT teams to ensure secure implementation of new technologies, systems and applications.

Secure Architecture Design and Implementation

- Design and implement secure architecture for new systems, applications & infrastructure to ensure confidentiality, integrity, and availability.

-Ensure secure configuration and deployment of systems, applications & infrastructure to prevent security vulnerabilities.

- Conduct thorough security reviews of innovative technologies, systems, and applications to identify security risks & recommend mitigation strategies

Regulatory Compliance and Governance

-Ensure compliance with industry regulations, standards, and best practices (e.g., ISO 27001, NIST Cybersecurity Framework)

-Develop, maintain, and enforce comprehensive security policies, procedures & standards to ensure organizational security.

-Conduct regular security audits, risk assessments, and compliance reviews to identify gaps & recommend remediation strategies

Security Awareness and Professional Development

- Develop and deliver comprehensive security awareness programs to educate employees on cyber security best practices & emerging threats

-Stay up to date with emerging threats, technologies, and best practices through continuous learning, training & professional development

-Participate in industry conferences, workshops, and forums to enhance cyber security skills, knowledge & professional network