Responsibilities
- Ability to perform risk analysis on the network architecture and identify threat, vulnerability and risks
- Good understanding of cloud network and on-premises network security solutions like Firewalls, VPC, network segmentation, security groups, IPS/IDS, WAF, NAC, Web proxy, and load balancers
- Conduct risk assessments and security evaluations of network services and on-prem and cloud infrastructure
- Identify and assess threats, vulnerabilities, risks and potential attack vectors and prioritize the mitigation
- Assess and manage IT risk treatment in all new projects or infrastructure within its scope (integration of security into projects, secure by design processes)
- Enforce Group policies / standards and/or procedures / good security practices within its department
- Develop and implement risk mitigation strategies and security controls
- Drive security program such as Pen test and Vulnerability programs globally
- Evaluate security configurations, policies, and procedures
- Perform security validations and exceptions for different needs on a day-to-day basis (AV, Browsing exceptions, RAF, admin rights, firewall flow, secure share, etc.)
- Assess compliance with industry standards and regulatory requirements (e.g., NIST, SOC 2, PCI-DSS, OWASP)
- Communicate risk and security recommendations to stakeholders
- Contribute to security audits (internal audit / regulators) within its scope
- To act as a security expert and point of contact on all operational security and risk management activities
- CCNA/CCNP Certification
- Network Security Certification in Cloud platforms Azure (SC-100 & AZ-500) and AWS Security Certifications
Required Profile
- 5+ years of experience in cloud and on-premises network risk assessment, operational security and risk management or related fields
- Strong knowledge in Cloud and network Fundamentals, compliance frameworks, and risk management principles
- Experience with cloud and on-premises infrastructure & application security assessments, risk assessments, and security controls implementation
- Excellent analytical, problem-solving, and communication skills
- Familiarity with cloud security framework, tools, and technologies (e.g., OSWAP, CSPM, CWPP, CIEM, DAST/SAST, NIST, CISSP)
We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.