IT Security Lead

Job Description Responsibilities: Security Architecture & Strategy Design, integrate, and maintain end-to-end security architecture for on-premises and cloud environments Ensure secure network topology including segmentation, access control, and VPN tunnels Lead development and enforcement of security policies, procedures, and best practices Work closely with developers and IT architects to embed security into application and infrastructure design SOC, SIEM, and Threat Management Manage endpoint protection through EDR and threat-hunting solutions Manage and enhance email security systems to protect against phishing, malware, and spam, ensuring compliance with organizational security policies Lead incident response efforts and develop threat prevention strategies Application and Cloud Security Supervise vulnerability scanning and penetration testing for internally developed applications Governance, Risk & Compliance (GRC) Drive cybersecurity-related compliance programs. Lead cross-functional GRC initiatives and support internal/external audits Manage security risk assessments and recommend mitigation strategies Documentation & Collaboration Maintain detailed documentation for security controls, policies, systems, and incidents Work collaboratively with software engineers, network teams, and business units Job Requirements Requirements Minimum Qualifications Education: Bachelor's degree in Engineering, Computer Science, Information Security, Cybersecurity, or a related discipline. Experience: Minimum of 4 years of hands-on experience in cybersecurity, information security, or related technical security roles. Technical Expertise Demonstrated experience and proficiency in: Designing and implementing security architectures for hybrid cloud and on-premises environments. Deploying, managing, and optimizing security technologies, including: Firewalls Web Application Firewalls (WAF) Endpoint Detection and Response (EDR) Security Information and Event Management (SIEM) Unified Threat Management (UTM) Intrusion Prevention Systems (IPS) Secure Web Proxies Distributed Denial-of-Service (DDoS) protection and mitigation solutions Network security design and operations, including security protocols, network segmentation, subnetting, VPN technologies, and access control models. Assessing security risks and implementing appropriate controls to safeguard enterprise systems, applications, and data.