As the Senior Security Engineer/Manager, you will lead efforts to safeguard client infrastructure and application development, collaborating closely with the CISO. Your role involves guiding a team of information security engineers to identify and address risks, respond to incidents, and enhance overall security measures for both physical and virtual assets. You'll leverage your robust technical expertise to serve as a key point of escalation within the Enterprise Security Team and spearhead technical implementations.

Responsibilities:

Formulate and uphold comprehensive enterprise security strategies and policies.
Collaborate directly with the CISO to align strategic initiatives and priorities for the Enterprise Security Team.
Enhance project management coordination across various teams.
Supervise day-to-day operations of the Enterprise Security Team.
Ensure ongoing compliance through effective management of vulnerability assessment processes.
Oversee application security practices and collaborate with development teams to refine processes.
Lead technical incident response efforts and serve as an escalation resource within the incident response framework.
Foster collaboration with departments throughout the organization to promote adherence to security best practices.
Develop and execute training initiatives to bolster security awareness.
Establish and maintain relationships with vendors and service providers.
Lead technical implementations with the Enterprise Security Team for both custom and vendor-provided solutions.
Offer architectural guidance to the IT team on proposed applications, designs, or integrations.
Generate and maintain executive reports to demonstrate the efficacy of security controls to stakeholders and management across business units.

Qualifications:

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
Minimum 7 years of experience in information security.
Minimum 5 years of technical experience in a cloud environment, preferably AWS.
Profound understanding of network security, database security, cloud security, and application security.
In-depth knowledge of security standards and regulatory compliance frameworks such as ISO 27001, NIST, SOC1, Sarbanes-Oxley Act, and GDPR.
Familiarity with a variety of best-of-breed security tools and applications.
Strong leadership and team management capabilities.
Excellent communication and interpersonal skills.
CISSP and/or AWS Security certification preferred.

The Phoenix Group

New Jobs

Senior Security Engineer/Manager