Senior Cybersecurity Strategist

About Us: A leading analytics firm has been recognized for innovation and excellence. Our team of experts specializes in risk, AI/ML, AML/FCC, and fraud. We deliver powerful platforms and solutions to streamline processes, comply with global regulations, and safeguard financial systems.

Job Summary:The Information Security Manager will develop and manage the company's information security strategy to protect its data and technology assets. This role requires a strategic thinker with expertise in cybersecurity, risk management, and compliance. The successful candidate will lead the InfoSec function, collaborate with other departments, and ensure that security policies align with organizational goals and industry standards.

Key Responsibilities:

• Develop a comprehensive information security strategy aligned with business objectives.
• Provide expert advice on cybersecurity threats, vulnerabilities, and emerging trends.
• Establish and maintain security policies, standards, and guidelines to protect data confidentiality, integrity, and availability.
• Provide strategic direction on security initiatives and ensure integration with overall IT and business strategies.

Risk Management and Compliance:

• Identify, assess, and prioritize security risks across the organization, and develop mitigation strategies to address these risks.
• Ensure compliance with industry regulations, standards, and best practices, including GDPR, CCPA, ISO 27001, and others as applicable.
• Oversee internal and external security audits, vulnerability assessments, and penetration testing to identify and remediate security weaknesses.

Security Operations:

• Lead the implementation and management of security technologies and solutions, including firewalls, spam/malware protection, intrusion detection systems, encryption, and endpoint protection.
• Monitor and respond to security incidents, ensuring timely and effective resolution.
• Develop and maintain incident response plans and lead the organization's response to security breaches and other emergency situations.

Security Architecture and Engineering:

• Collaborate with the technology team to design and implement secure network, application, and cloud architectures.
• Evaluate and recommend new security technologies and tools to enhance the company's security posture.
• Oversee the secure development lifecycle, ensuring that security is embedded in every phase of product development.

Stakeholder Engagement and Reporting:

• Communicate security risks, incidents, and strategies to the executive team, Board of Directors, and other stakeholders.
• Prepare and deliver regular reports on the state of the company's information security to senior leadership.
• Engage with customers, partners, and regulatory bodies to address security concerns and demonstrate the company's commitment to data protection.

Team Leadership and Development:

• Build and lead a high-performing information security team, providing mentorship, guidance, and professional development opportunities.
• Foster a culture of security awareness across the organization through training, communication, and advocacy.
• Collaborate with IT, DevOps, and other teams to integrate security best practices into all aspects of the organization.

This role requires proven experience in cybersecurity and information security management, with expertise in Microsoft security tools, including Microsoft Sentinel, Intune, Purview, Defender, Entra ID, and Microsoft Exchange. Comprehensive knowledge of ISO 27001 standards, with hands-on experience in ISO audits and managing compliance with industry standards, is essential.