Role Summary :

We are seeking a high-caliber Security SME to serve as the ultimate technical authority for our information security posture. In this critical leadership role, you will apply deep subject matter expertise to evaluate business operations, identify vulnerabilities, and architect robust technical solutions.

You will act as a "Strategic Consultant" across business units, providing high-level mentorship to Security Analysts and Leads while overseeing the full lifecycle of security solution development.

The ideal candidate possesses an advanced ability to integrate security principles into software engineering designs and holds the authority to drive long-term Security Planning and Strategies.

This role reports directly to the CISO and requires a "Pressure-Tested" professional with prestigious certifications such as CISSP, CISM, or CEH.

Responsibilities :

- Threat Detection & Response Architecture: Lead the design and implementation of advanced security monitoring frameworks to detect, analyze, and neutralize sophisticated cyber threats.

- Vulnerability Management Leadership: Oversee comprehensive security and vulnerability assessments, determining the technical requirements for remediation and system hardening.

- Subject Matter Consulting: Provide specialized expertise across business operations to identify where technical security solutions can improve overall business performance and resilience.

- Technical Solution Governance: Oversee the development, testing, and implementation of security technologies, ensuring they meet strictly defined business and regulatory requirements.

- Strategic Incident Management: Architect high-level security incident response protocols and provide expert guidance during critical system breaches or forensic investigations.

- Identity & Access Governance: Design and optimize Identity and Access Management (IAM) strategies to ensure zero-trust principles are integrated across the enterprise.

- Mentorship & Performance Management: Provide technical guidance to Security Analysts and Leads; manage subordinate performance through formal appraisals and professional development plans.

- Documentation & Reference Integrity: Verify the accuracy of technical reference information, including system requirements, training manuals, and user guides, before dissemination to stakeholders.

- Policy & Procedure Development: Contribute specialized knowledge to the creation of organizational security policies and standard operating procedures (SOPs).

- Management Reporting: Prepare sophisticated security reports and risk dashboards to support high-level decision-making by the CISO and Executive Management.

- Proactive Security Research: Conduct thorough research into emerging threat vectors and defensive technologies to maintain a competitive advantage in the security landscape.

Technical Requirements:

- Core Experience: Minimum 7 years in Information Security, with a dedicated focus (5+ years) on Security Operations (SecOps).

- Professional Certifications: Mandatory certifications such as CISSP, CISM, ISO 27001 Lead Auditor, or CEH.

- Systems Engineering Integration: Deep knowledge of software engineering principles to optimally integrate security subject expertise into software solution designs.

- Security Architecture Mastery: Advanced ability to recommend and implement technical solutions for cross-functional projects.

- Regulatory Knowledge: Thorough understanding of the latest security principles, protocols, and international compliance standards.

Preferred Skills :

- Security Portfolio Management: Experience managing a diverse portfolio of security tools including SIEM, SOAR, EDR, and DLP.

- Cloud Security Proficiency: Expertise in securing multi-cloud environments (AWS, Azure, or GCP).

- Strategic Planning: Proven authority in developing long-term security roadmaps and multi-year investment strategies.

Core Competencies :

- Analytical Problem-Solving: Exceptional ability to deconstruct complex technical challenges and recommend scalable solutions under intense pressure.

- Communication Excellence: Superior written and verbal skills to articulate complex risk profiles to non-technical executive leadership.

- Meticulous Recordkeeping: An uncompromising approach to documenting processes, system requirements, and compliance evidence.

- Leadership Gravitas: The ability to mentor technical leads while challenging architectural assumptions to improve security outcomes.