Salary Range: 55000 to 60000 (Currency: USD) (Pay period: per-year-salary)

WHAT YOU’LL DO:

• Implement and maintain compliance with industry standards such as PCI DSS, SOC 2, ISO 27001, and PrivacyShield/Data Privacy Framework.
• Conduct regular audits and assessments to ensure ongoing adherence to compliance requirements.
• Develop and update policies, procedures, and documentation to support compliance efforts.
• Collaborate with internal and external auditors to facilitate compliance audits and assessments.
• Design, implement, and manage security measures to protect company data and infrastructure.
• Monitor and analyze security incidents, vulnerabilities, and threats.
• Respond to security incidents and coordinate remediation efforts.
• Perform regular security assessments, including penetration testing and vulnerability scanning.
• Implement and manage security tools and technologies, such as firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
• Configure and manage security tools such as Splunk, Sophos, KnowBe4, Qualys, AWS, Azure etc.
• Administer the IAM system to manage user access and privileges to ensure proper access controls are in place. Perform user access audits at a regular interval.
• Conduct security incident readiness reviews and tabletop exercises at regular intervals.
• Manage and monitor the company’s network security infrastructure, including firewalls, intrusion detection/prevention systems, cloud gateways, email servers, endpoint protection systems, Extended detection and response (XDR) and VPNs.
• Perform network vulnerability assessments and penetration testing to identify and address potential security weaknesses.
• Conduct phishing and social engineering tests and assess phishing reports
• Perform Firewall audits and segmentation tests as required by compliance guidelines.
• Identify, assess, and mitigate security risks across the organization.
• Develop and maintain risk management frameworks and processes.
• Provide recommendations for security improvements and risk mitigation strategies.
• Conduct security risk assessments for new projects and technologies.
• Provide security awareness training to employees and promote a culture of security.
• Assist in the development and implementation of incident response plans and disaster recovery procedures.
• Stay up-to-date with the latest security trends, technologies, and regulatory changes.

WHAT YOU’LL BRING:

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Relevant certifications such as CEH, CHFI, Security+ or equivalent.
• In-depth knowledge of security protocols, cryptography, authentication, authorization, and security vulnerabilities.
• Experience with security monitoring, incident response, and forensics.
• Familiarity with regulatory requirements and industry best practices.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills.
• Ability to work independently and as part of a team.