Information Security Lead

Tasks

• Build security function roadmap and communicate to stakeholders
• Conduct threat modelling and security design reviews
• Create response library and evidence packs
• Define data classification and DLP policies
• Define information security governance framework
• Define network security standards and zero trust principles
• Define security input to data processing agreements
• Drive SOC 2 Type II audit readiness
• Ensure logging alerting and detection across cloud platforms
• Establish AI governance for GenAI risk
• Evaluate and manage external SOC provider relationship
• Lead incident response coordination
• Lead phishing and security awareness programs
• Maintain and test incident response and business continuity playbooks
• Maintain security risk register
• Manage vendor security assessments
• Run AppSec penetration testing and vulnerability disclosures
• Run partner and carrier security assessment process
• Set cloud security posture governance and remediation SLAs
• Support technical and organizational measures

Perks/Benefits

• N/A

Skills/Tech-stack

AI Governance | AppSec | Awareness Training | Business Continuity | CSPM | Cloud Security | DPA | Data Classification | Data Loss Prevention | Data loss | GDPR | GRC Tooling | Governance Risk | Governance risk compliance | Incident Response | Information security | Logging and Monitoring | Loss prevention | Observability | Partner Security Assessments | Penetration Testing | Risk Management | Risk compliance | SOC 2 | SOC 2 Type II | Security Assessments | Security Awareness Training | Security Risk | Security Risk Management | Security awareness | Subprocessor Management | Threat modeling | Vendor Risk | Vendor risk management | Zero Trust