About the role:
As an Information Security Lead at Safepay, you will be at the forefront of safeguarding our organization's critical assets. This role requires an experienced professional with a deep understanding of information security, cyber threats, and risk management. You will play a pivotal role in establishing and maintaining robust security measures across our office, data center, and to protect all information assets.
What You’ll do:
- Information Security Management:
- Develop, implement, and manage the company's information and cyber security program.
- Oversee and enforce information security policies and procedures.
- Incident Response:
- Lead the incident response team in identifying, responding to, and mitigating security incidents.
- Conduct post-incident analysis and implement improvements to enhance security posture.
- End-User Support:
- Provide guidance and support to end-users on information security best practices.
- Conduct training sessions to enhance the team's awareness of cyber threats.
- Collaboration with IT and Network Teams:
- Collaborate with IT and Network teams to security of firewall configurations and other IT assets.
- Assist in the design and implementation of security controls for information technology infrastructure including hardware and software.
- SIEM/FIM and IPS/IDS Implementation:
- Design and implement Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS).
- Monitor and analyze network traffic for potential security incidents.
- Manage Security Information and Event Management (SIEM) solutions.
- Implement File Integrity Monitoring (FIM) to detect and respond to unauthorized changes.
- Security Awareness:
- Develop and deliver information security training programs.
- Foster a culture of security awareness within the organization.
- Regulatory Compliance:
- Ensure compliance with relevant information security laws, regulations, and industry standards.
- Conduct periodic assessments for information security postures implemented in the company.
- Vendor Security:
- Evaluate and ensure the security posture of third-party vendors.
- Implement measures to mitigate security risks associated with vendor relationships.
- Documentation:
- Maintain comprehensive documentation of security policies, procedures, and incident response plans.
- Create and update security awareness materials.
Must Haves:
- Bachelor's/Master's degree in Information Security, Cybersecurity, or a related field.
- Proven experience of minimum 04 years in information security management.
- Relevant certifications such as Certified Information Systems Security Professional (CISSP) or equivalent.
- In-depth knowledge of security frameworks, standards, and best practices.