Head of Security

Role & responsibilities Develop and execute the organization's cybersecurity strategy, ensuring alignment with business objectives and regulatory requirements. Lead the Information Security function and oversee security operations, governance, risk management, and compliance initiatives. Design and implement enterprise-wide security architecture, policies, standards, and best practices to protect critical systems and data. Establish and manage Security Operations Center (SOC), incident response, threat detection, vulnerability management, and cyber resilience programs. Drive cloud security, application security (AppSec), DevSecOps, identity and access management (IAM), and network security initiatives. Conduct security risk assessments, penetration testing, audits, and compliance reviews to identify and mitigate security risks. Collaborate with Engineering, IT, DevOps, Product, Legal, and business stakeholders to integrate security into the software development lifecycle and operational processes. Ensure compliance with industry standards and regulations such as ISO 27001, NIST, PCI-DSS, GDPR, and other applicable frameworks. Lead incident response activities, forensic investigations, disaster recovery planning, and business continuity initiatives. Evaluate emerging cybersecurity threats, technologies, and security solutions to strengthen the organization's security posture. Build, mentor, and lead high-performing cybersecurity teams while fostering a security-first culture across the organization. Manage third-party security vendors, security tools, budgets, and executive reporting on cybersecurity risks and performance. Preferred candidate profile Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Security, or a related field. 5 to 10 years of experience in cybersecurity, information security, or IT security, including experience leading security programs or teams. Strong expertise in Cyber Security, Information Security, Security Architecture, Cloud Security, Network Security, Application Security (AppSec), and Identity & Access Management (IAM). Hands‑on experience with SIEM platforms (Splunk, Microsoft Sentinel, QRadar), Security Operations (SOC), Incident Response, Threat Intelligence, Vulnerability Management, and Penetration Testing (VAPT). Experience securing cloud environments on AWS, Microsoft Azure, or Google Cloud Platform, with knowledge of DevSecOps and Secure SDLC practices. Strong understanding of ISO 27001, NIST Cybersecurity Framework, PCI-DSS, GDPR, CIS Controls, and Governance, Risk & Compliance (GRC). Experience with firewalls, IDS/IPS, endpoint security, web application firewalls (WAF), and security monitoring tools. Professional certifications such as CISSP, CISM, CISA, CEH, CCSP, AWS Security Specialty, or Azure Security Engineer are highly preferred. Excellent leadership, strategic planning, stakeholder management, communication, and problem-solving skills. Proven ability to develop security strategies, manage cyber risks, lead incident response, and drive security awareness across the organization. Experience in Software Product, SaaS, FinTech, Banking, Cloud Computing, Healthcare IT, Telecommunications, or Enterprise Technology environments is preferred. #J-18808-Ljbffr