Propose solutions to IT security vulnerabilities, and coordinate with IT/Network/ other business units for activities that needs to be done to correct /prevent IS vulnerabilities until closure.

Assess and manage mitigation finalization of any security related findings of any type of audit report: ISO 27001 Audit Report, Group Report, Internal Audit Report, Internal Control Audit, etc.

Prepare reports regarding potential IT security vulnerabilities by assessing and analysing periodically information security related system data (ex: from Log Event Management Tools, SIEM, Exchange & AD Auditing Tools, firewall, antivirus system, Defender, NESSUS, etc.

Coordinate with development and IT teams to ensure security vulnerabilities are addressed promptly.

Collaborate continuously with otheCompany Teams Audit / IT teams/etc in case of an information security related event or security breach by performing the incident response process, analysis, identification, containment, eradication, recovery, and lessons learned.

Prepare and provide reports on security incidents, security performance/scanning results.

Produce detailed reports for senior management on the state of the organization’s security posture.

Oversee the configuration, implementation, and maintenance of security infrastructure, such as firewalls, DMZs, VPNs, etc. Ensure encryption protocols, access control measures, and security updates are properly in place.

Support other IT and Network Group Managers for BCP (Business Continuity Planning and Procedures) to be defined, tested and validated.

Create, implement, and update information security policies, standards, and procedures.

Ensure compliance with security policies by employees and third parties.

Conduct regular security risk assessments to identify potential vulnerabilities, threats, and risks to the organization’s information systems.

Participate in security audits and ensure readiness for internal or external assessments.

Monitor and analyse data movement via DLP Solution within and outside the organization to ensure security compliance.

Manage and ensue that employees Information Security Awareness Trainings are delivered via Proofpoint Security Awareness Platform. Deliver on-site security awareness training sessions.

Perform in time all the mandatory information security awareness trainings assigned from the Information Security Team.

Comply with Information Security Policies, and all company procedures and regulations.