Perform regular vulnerability assessments and
penetration testing, identifying areas of risk in
on-premises, cloud, and hybrid environments.
Develop and recommend remediation strategies to
minimize vulnerabilities.
Policy Development & Compliance:
Continuously monitor and respond to security incidents
using advanced threat detection tools (e.g., SIEM
platforms like Splunk or QRadar).
Assist in drafting, updating, and enforcing
cybersecurity policies and procedures in alignment
with industry standards such as
NIST Cybersecurity Framework
and
ISO 27001
.
Collaboration & Training:
Work cross-functionally with IT, DevOps, and legal teams
to ensure secure system integration and data protection.
Mentor junior cybersecurity staff and contribute to
ongoing team training initiatives.
Conduct security awareness training sessions for
employees to reduce human factor risks.