CHIEF CYBERSECURITY OFFICER - KET-907

Bebeeinformationsecurity


The role of an Information Security Architect is a vital component in protecting the organization's information assets. This position requires collaboration with various stakeholders, including enterprise architects, IT teams, business stakeholders, third parties, and service providers to ensure compliance with security controls, policies, and regulations. The Information Security Architect develops and updates the organization's security strategy, conducts research on new technologies, designs solutions, and monitors compliance. Key responsibilities include defining standards to support information security and compliance, maintaining a 1-3 year security roadmap, overseeing project security alignment with policies and regulations, assessing threats and vulnerabilities, recommending mitigations, staying informed on security trends, evaluating new capabilities, supporting policy development, ensuring consistent application, evaluating and planning security systems, developing and implementing network security strategies, defining system availability levels and disaster recovery plans, documenting security requirements throughout the system lifecycle, ensuring systems align with cybersecurity architecture guidelines, identifying critical business functions, performing security reviews, developing security risk management plans, providing procurement input, assessing how new systems impact security posture, and evaluating security architectures for adequacy. To be successful in this role, the ideal candidate should possess a bachelor's degree in Computer Science, Cyber Security, or a related field, with at least 10 years of experience in IT, including 7+ years in information security. Advanced English proficiency is also required. Desirable skills and qualifications include experience with enterprise architecture frameworks like TOGAF, understanding of security principles, defense-in-depth, and control frameworks (NIST, ISO), risk assessment, vulnerability management, and IAM expertise, knowledge of regulatory impacts and legal cooperation, proficiency in network design, security, and PKI, understanding of data governance and enterprise data modeling, broad IT knowledge including virtualization, cloud, mobile, awareness of industry standards and regulations, strong communication and collaboration skills, proficient in English, problem-solving and liaison skills, business risk balancing ability, TOGAF certification preferred, and industry certifications like CISSP, CEH, CCNP, etc., desirable. This is a hybrid work model position, with employees working on-site 2 days/week and remote 3 days/week. Travel requirements are minimal, less than 10% domestic/international travel may be needed.

trabajosonline.net © 2017–2021
Más información