网络安全架构师

Key Responsibilities

• Lead and oversee the Cyber Threat and Vulnerability Management (CTVM) program across infrastructure, applications, cloud services, and digital assets

• Coordinate vulnerability assessments, penetration testing, security reviews, remediation tracking, and risk reporting

• Maintain visibility of IT assets and ensure accurate hardware and software inventories

• Coordinate security assessments, including cloud, application, AI, and configuration security reviews

• Oversee security testing activities within DevSecOps pipelines, including SAST, DAST, secret scanning, and software composition analysis

• Monitor SOC, EDR, and MDR services to ensure timely detection, escalation, investigation, and resolution of security events

• Lead cybersecurity incident response, root cause analysis, remediation, and lessons-learned activities

• Maintain cybersecurity policies, procedures, operating models, and incident response readiness

• Establish and monitor cybersecurity KPIs, KRIs, dashboards, and management reports

• Identify security improvement opportunities and provide risk-based recommendations to management

• Collaborate with technical teams and stakeholders to strengthen cybersecurity controls, compliance, and enterprise-wide resilience

Person Specifications

• Bachelor's degree in Information Security, Computer Science, IT, or a related discipline

• 7–10 years of experience in cybersecurity, particularly vulnerability management, security assessments, security monitoring, and incident response

• Strong understanding of the end-to-end vulnerability management lifecycle, including risk prioritisation, patching, and remediation

• Hands-on experience with security tools such as Nessus, Burp Suite, CrowdStrike, EDR, MDR, and attack surface management solutions

• Knowledge of application security, cloud security, threat intelligence, and adversary tactics, techniques, and procedures (TTPs)

• Familiarity with security frameworks and regulatory requirements, including CIS Controls, ISO 27001, BNM RMiT, and CSA Cloud Controls Matrix

• Strong incident coordination, risk assessment, stakeholder management, and reporting capabilities

• Excellent communication and analytical skills, with the ability to engage technical and non-technical stakeholders

• CISM, CRISC, CEH, OSCP, or equivalent cybersecurity certifications are advantageous

Vendor submissions - 12 months
Originally posted on Himalayas