Job Description
Key Responsibilities:
Cloud Security (Azure & AWS): Architect and enforce security policies for cloud services (Azure and AWS), focusing on data encryption, identity and access management (IAM), and compliance monitoring.
PKI/Certificate Management (Venafi, DigiCert, MS PKI): Administer and maintain Public Key Infrastructure (PKI), SSL/TLS certificates, and encryption keys to ensure secure communication channels and system integrity.
Email Security & Anti Phishing (MS Defender, Cisco Cloud): Implement and manage email security solutions (Microsoft Defender for Office 365, Cisco Cloud Email Security) to protect against phishing, spear phishing, malware, and spam attacks.
Incident Response & Monitoring: Continuously monitor security incidents and provide prompt resolution for any data security related events. Participate in incident response efforts, helping to prevent further data loss or breaches.
Compliance & Risk Management: Work closely with compliance teams to align data protection practices with industry standards (GDPR, CCPA, etc.) and regulatory requirements, ensuring ongoing audits and assessments.
Collaboration: Collaborate with cross functional teams (Infrastructure, DevOps, IT, Legal, and Compliance) to define and enforce data security policies and best practices across the organization.
Continuous Improvement: Stay UpToDate on emerging threats, security technologies, and regulatory changes, recommending and implementing new security controls and strategies to reduce risk.Key Responsibilities:
Cloud Security (Azure & AWS): Architect and enforce security policies for cloud services (Azure and AWS), focusing on data encryption, identity and access management (IAM), and compliance monitoring.
PKI/Certificate Management (Venafi, DigiCert, MS PKI): Administer and maintain Public Key Infrastructure (PKI), SSL/TLS certificates, and encryption keys to ensure secure communication channels and system integrity.
Email Security & Anti Phishing (MS Defender, Cisco Cloud): Implement and manage email security solutions (Microsoft Defender for Office 365, Cisco Cloud Email Security) to protect against phishing, spear phishing, malware, and spam attacks.
Incident Response & Monitoring: Continuously monitor security incidents and provide prompt resolution for any data security related events. Participate in incident response efforts, helping to prevent further data loss or breaches.
Compliance & Risk Management: Work closely with compliance teams to align data protection practices with industry standards (GDPR, CCPA, etc.) and regulatory requirements, ensuring ongoing audits and assessments.
Collaboration: Collaborate with cross functional teams (Infrastructure, DevOps, IT, Legal, and Compliance) to define and enforce data security policies and best practices across the organization.
Continuous Improvement: Stay UpToDate on emerging threats, security technologies, and regulatory changes, recommending and implementing new security controls and strategies to reduce risk.