IT & Cyber Risk Manager

Job Responsibilities: - Monitor and maintain the internet, email and web security for entire organization. - Track, monitor, analyze and resolve any vulnerability or security issue. - Monitor on new CVE and ensure affected systems are being patched accordingly. - Respond and resolve any vulnerability or security incident that may arise. - Act as the point of contact on any security incidents to respond, isolate, remediate, or resolve the incident quickly. - Ensure periodic testing of the organizations network and systems to determine security violations and inefficiencies. - Stay up-to-date on the latest cyber threats and to adapt CIS Benchmarks to proactively safeguard any new emerging security risks. - Manage user accounts and access controls. - Develop, implement and maintain the IT and Cyber security frameworks, procedures and policies. - Safeguard all network elements including but not limited to computer networks, local area networks (LANs), wide area networks (WANs), internet connections, intranet, VPNs, VLANs, VoIP and other data communication systems. - Monitor network performance, identify bottlenecks, and troubleshoot network issues. - Create user awareness with continuous education on Cybersecurity. Key Skill Requirements: - Proficiency in conducting regular vulnerability assessments of the systems to prevent any security incident. - Awareness of the latest methods used by hackers and malicious elements to break into systems. - Competency to use the available tools to discover any dubious movement in the network and system. - Soft skills including effective verbal communication and advanced written with all levels in the company. - Knowledge of cyber laws and compliance requirements as per the law of the land. - Ability to conduct an in-depth analysis of computer networks and identify any vulnerabilities in the system. Attention to detail is a fundamental personality trait for this position and able to meet deadlines with minimal supervision. Qualification and Experiences requirement: - Bachelors degree in Information Technology (IT), Information Security (IS) or equivalent education with work related experience. - Minimum 5-8 years of prior relevant experience. - Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements. - Hands-on experience analyzing high volumes of logs, network data (e.g., Full-Packet Capture FPC), and other attack artifacts in support of incident investigations. - Experience with vulnerability scanning and monitoring solutions. - Experience on Office365 and other Cloud Security (e.g., GCP, AWS, Azure). - Understanding of mobile technology and OS (e.g., Android, Huawei, iOS, Windows), VMware technology is a plus. Originally posted on Himalayas