Provide strategic leadership and direction to advance information security technology engineering across the enterprise
Lead a team of security professionals and foster a culture that embodies an engineering mindset that values high performance, innovation, collaboration, and continuous improvement
Partner and enhance relationships with the Security Operations Centre, application teams, architects, and other business departments to engineer and deploy solutions that protect the company’s most important information assets and services.
Spearhead the development of a best-in-class Information Security Engineering operating model
Develop and implement comprehensive annual and multiyear plans that enable the execution of our business strategies in a safe and secure manner
Ensure the development, testing, and effective measurement of controls embedded in information security operations across the enterprise
Partner with cross-functional teams on the design, implementation, and continuous improvement of cloud security technologies, leveraging automation, and best practices
Drive operational excellence and efficiency through strategic vendor partnerships and outsourcing
Develop and deliver on sourcing and automation strategy for the information security technology stack
Partner on strategic relationships with key information security vendors and service providers, ensuring alignment with business needs and performance expectations
Manage security engineering budgets to maximize impact and efficiency
Engage with external partners, vendors, and regulatory bodies to stay informed about evolving security trends and threats
Requirements & Skills:
A bachelor’s degree in cybersecurity, computer science, engineering, or a related field is preferred.
7+ years of information security engineering and deployment experience in a large enterprise
5+ years in a leadership role overseeing security engineering and operations.
Proven experience of navigating complex organization structures and managing internal stakeholders.
In-depth knowledge of security frameworks (NIST, ISO27001, CIS), standards, and best practices.
Proven experience and technical expertise in enterprise security engineering and related technologies (ZTNA, SASE)
Extensive experience in cybersecurity and technology deployment, including familiarity with developing business requirements and designing application, network, and data management platforms. Background in production operations is a plus.
Deep understanding and expertise in securing cloud environments.
Thorough understanding of information technology service management and delivery methods.
Strong operational aptitude and the ability to analyze highly complex situations.
Strong vision and leadership in systematizing and operationalizing work.
Continuous pursuit of improvement and cost-efficiency in operations.
Highly effective teaming and collaboration skills.
Relevant security certifications such as CISSP, CISM, and CISA are considered a strong asset.