S B. Email & Phone Number

Islamabad, Pk

- Governing security operations in IT cloud operations team- To ensure compliance of IT infrastructure located on-prem, in public and private as per Defendable Architecture guidelines ( on-prem and public cloud)- Drive vulnerability management program for hosts (located on-prem, and in public cloud) & containers and liaison with MSP and internal stakeholders to mitigate the risksResponsible for the implementation of compensating controls to mitigate risk and ensure it is in the acceptable range- Have knowledge and understanding of AWS multi-tier architecture, EC2 instances, S3 buckets, AWS IAM, AWS Guard Duty, Cloudwatch, AWS inspector, security groups, ACLs, security hub, firewall manager and Route 53- To engage and support business security teams (Security Assessment Team, GRC Team & SOC Team) to fulfill security requirements and achieve business goalsDrive proactive activities to ensure compliance with group and regulatory requirements- Ensure operational maintenance including updates, licensing and support for all security solutions- Coordination with vendors/partners to conduct security audits, reviews and compliance checks- Drive software/version upgrade and patching activities to maintain secure versions across DC environment- Responsible to coordinate and collaborate with NOC and MSP for fault management and quick resolution- Ensure managed service partner and OEM support levels for smooth operations by ensuring contractual SLA for all KPIs- Manage financial forecasts and ensure financial discipline for security area

- Assessment of transparent data encryption for databases- Hashicorp Vault testing for key management- Integration of devices with central authentication server using LDAP - Set and monitor the IT security & privacy standards, architecture and requirements ensuring their implementation, as well as leading and monitoring the response and mitigation of the cyber threats and attacks- Define the Group IT security & privacy policies and procedures in line with ISO 27001, 27701 , PCI DSS and CTDISR - Manage IT risks through their detection, identification, monitoring, evaluation and mitigation- Apply cyber security risk management principles to conduct assessment of first line business applications, IT systems and processes according to established ISMS & PIMS requirements- Understanding of assets classification and risk assessment- Analyze existing cyber security mitigation strategies / controls and assess their effectiveness- A robust understanding of IT and Information Security risk mitigation control processes such as vulnerability and threat management, patch management, penetration testing / red-teaming / cyber-attack simulation- Understanding how cyber impacts business objectives- Ability to understand business and technical implications- Knowledge of data privacy standards & Regulations- Knowledge of cyber threat vectors, both generally and sector-specific- Knowledge of current cyber threat trends and approaches- Architecture, topology, ports and protocols, services

- Administration of next-generation firewall- WAF deployment & administration- Configuration of IPSEC tunnels- Hardening of OS as per CIS benchmark - Administration of Kaspersky Endpoint Solution- Security assessment of applications and servers- Wazuh SIEM administration- Audit of security groups and ACLs