IT Security Head

The Head of IT Security is a critical leadership role responsible for developing IT Security Standards and Procedures as well as implementing IT security strategy, initiatives and programs aligned with the overall Information Security Strategy of the CISO Team. This individual will lead a team of IT Security Officers to protect the company's information assets, systems and networks from internal and external threats. The Head of IT Security will ensure compliance with relevant regulations and industry best practices, and will act as a key advisor to senior management on all technical security-related matters. The Head of IT Security reports directly to the CTO / Head of IT and has a dotted line reporting to the CISO. Responsibilities Strategy and Leadership Develop comprehensive implementation plans aligned with the overall information security strategy of the CISO. Provide leadership and direction to the IT security team, fostering a culture of security awareness and best practices. Stay abreast of emerging security threats, vulnerabilities, and technologies. Act as a subject matter expert on IT security, providing guidance and recommendations to senior management. Security Operations Oversee the day-to-day operations of the IT security team and the third-party MSOC provider on incident response, vulnerability management, and security monitoring and investigation. Develop and maintain IT-specific security policies, standards, and procedures aligned with the ISSP and ISP. Manage and maintain security infrastructure, including firewalls, IDS/IPS, SIEM, and other security tools. Manage the third-party MSOC through monthly service and performance reviews. Risk Management and Compliance Conduct regular technical security assessments to identify and mitigate risks. Ensure compliance with relevant regulations and industry standards such as BSP circulars 808, 982, ISO 27001, or as directed by the CISO. Incident Management and Response Develop and maintain an incident management and response plan. Develop and maintain a security playbook including actions and responses to various incidents. Conduct regular testing of the security playbook to ensure effective stakeholder response during incidents. Provide reports on regular security testing as per the Incident Management Procedure. Lead incident response efforts and manage post-incident reviews, including lessons learned and updates to procedures and playbooks. Manage security incidents and investigations, including forensic analysis and reporting, following the Incident Management Procedure. Team Management and Collaboration Recruit, train, and mentor IT security officers. Collaborate with the CISO team, other IT teams, and business units to integrate security across the organization. Manage vendor relationships related to security products and services. Coordinate with the CISO team on IT security budget considerations. Qualifications Bachelor's degree in Computer Engineering, Information Technology, or Computer Science. 5-10 years of experience in an IT security role. Working Schedule: Monday to Friday, 44 hours weekly. Work Setup: Hybrid, primarily remote work. #J-18808-Ljbffr