The Lead, Information Security is accountable in ensuring that information security GRC (Governance, Risk and Compliance), Defensive Security (Cyber Monitoring, Response and Investigations) and Offensive Security (Vulnerability Management and Penetration Testing) functions are performed at an optimized level.

Requirements
1. Assist CIS Head in Security Strategy and Policy Development

• Develop, review and maintain information security policies, standards, guidelines and procedures.
• Ensure alignment of the information security strategy with the company's business goals.
• Identify and evaluate emerging security threats and technologies and identify ways to mitigate the risks.

2. Lead the Risk Management Function

• Conduct regular risk assessments of company's digital assets and perform vulnerability assessments.
• Develop and implement risk mitigation strategies.
• Monitor and manage security incidents and breaches.

3. Help in Information Security Compliance and Audit Tracking

• Ensure compliance with relevant regulations, standards, and frameworks (e.g., ISO 2700x,CIS, NIST, etc.).
• Prepare for and support internal and external security audits.
• Maintain documentation and evidence of compliance activities.

4. Review and Approve Security Awareness and Training Execution

• Develop and deliver security awareness programs for employees.
• Promote a culture of security within the organization.
• Provide training and guidance to technical staff on security best practices.

5. Collaboration and Communication

• Act as a liaison between the Info Sec team and other units to enhance cooperation for culture of security.
• Communicate security-related issues to concerned business units

6. Security Operations

• Oversee daily security operations, including monitoring and responding to security events.
• Ensure proper configuration and management of security tools (e.g. endpoint security, network and cloud security technologies).
• Coordinate with Technology Teams to ensure secure infrastructure and application deployments are safe and compliant.
• Perform security administration and configuration for security specific systems and applications including but not limited to: SIEM/SOAR, VAPT Tools, Endpoint Security, Network Security, Cloud and Application Security Systems
• Infrastructure related systems administration and maintenance will be handled by technology teams/partner including but not limited to: Server, Cloud and Virtualization, Network, Web and Applications not specific for security.

7. Incident Response

• Develop and maintain an incident response plan/ Playbook.
• Lead and coordinate response efforts during security incidents.
• Conduct post-incident analysis and implement lessons learned to improve security posture.

8. Threat Intelligence and Research

• Stay informed about the latest security threats, vulnerabilities, and attack vectors.
• Conduct threat modeling and penetration testing to identify security weaknesses.
• Integrate threat intelligence into the overall security strategy.

9. Security Architecture and Design

• Participate in the design and review of new systems, networks, and applications to ensure they meet security requirements.
• Advise on secure architecture and development practices.
• Implement security controls and technologies to protect data and infrastructure.

10. Other related tasks that may be assigned by the CIS Head.
Benefits
Communication Allowance, Health & Life Insurance & Others