Senior Information Security Professional
Core
Senior Information Security Professional acting as technical authority for incident oversight, vulnerability management, cloud security, and regulatory compliance within the CISO Office.
Role type
Senior IC Information Security Professional (Risk, Compliance, Cloud)
Builds
Security posture, risk registers, compliance frameworks, and incident response capabilities
Domain
Telecommunications, Technology, Government
Required skills
Security incident analysis, Vulnerability management, Cloud security architecture, Risk assessment, Regulatory compliance, Data privacy protection, Business continuity planning, Policy development, Team mentoring, Threat intelligence analysis
Preferred skills
Experience with ISO/IEC 27001, Zero Trust principles, MITRE ATT&CK framework, Cross-border data transfer regulations
Technologies
Microsoft 365, Azure, AWS, MITRE ATT&CK, DLP tools, Encryption/Masking/Pseudonymisation tools
Responsibilities
Review and analyze major security incidents and provide independent assessments to the CISO; Define and maintain vulnerability management policies and assess penetration testing reports; Review security architecture for cloud services and AI solutions; Lead information security risk assessments and maintain the risk register; Coordinate ISO/IEC 27001 and regulatory compliance audits; Lead development of privacy impact assessments and data protection standards; Lead annual Business Impact Analysis and business continuity planning; Prepare security posture dashboards and mentor Information Security Professionals.
