Job Description
Formulate and execute long-term cybersecurity strategies, risk management frameworks, and business continuity plans aligned with enterprise goals.
Direct threat landscape research, vulnerability management, and crisis management protocols to maintain a robust security posture.
Establish cybersecurity metrics, KPIs, and executive reporting for senior leadership and key stakeholders.
Oversee the selection, integration, and continuous monitoring of enterprise security tools (firewalls, SIEM, IAM, encryption).
Drive cloud security control automation and lead initiatives to identify, classify, and secure critical infrastructure and customer data.
Direct the Incident Response Plan, leading mitigation, forensics, and documentation during active security incidents.
Collaborate with IT engineering to embed Security-by-Design principles into systems, applications, and network architecture.
Lead enterprise compliance frameworks (GDPR, ISO 27001, NIST, SOC 2, HIPAA, etc.).
Manage the annual audit calendar, external certifications, and audit trail validation across all environments.
Execute third-party vendor risk assessments and contract governance.