Head, IT Security

Job Objective(s)

• The Head of IT Security will be responsible for leading the organization’s efforts to protect its information technology infrastructure, applications, and data.
• This role is crucial for the development, implementation, and maintenance of a comprehensive IT security strategy that ensures the integrity, confidentiality, and availability of the company’s IT systems.
• The Head of IT Security will also work to minimize risk and ensure compliance with industry standards, regulations, and best practices.

Duties & Responsibilities
Strategic Leadership:

• Develop and implement a robust IT security strategy aligned with the organization’s business goalsand objectives.
• Ensure the security of IT systems by monitoring evolving risks and establishing proactive defenses.
• Lead, manage, and mentor the IT security team to build a high-performing department.

Risk Management:

• Identify, assess, and manage IT security risks and threats to the organization’s systems and data.
• Conduct regular security assessments, audits, and penetration testing to identify vulnerabilities.
• Recommend, implement, and monitor risk mitigation strategies and plans.

Security Governance and Compliance:

• Develop and enforce IT security policies, procedures, and standards.
• Ensure compliance with relevant security regulations and frameworks (e.g., GDPR, HIPAA, ISO 27001,NIST).
• Oversee and manage security audits, assessments, and certifications as required.

Incident Response & Recovery:

• Develop and manage a robust incident response plan to address and recover from IT security
• breaches or threats.
• Coordinate response efforts in the event of a security breach, including forensic investigation and rootcause analysis.
• Ensure business continuity planning and disaster recovery procedures are in place and regularlytested.

Security Infrastructure Management:

• Oversee the implementation and management of security tools and technologies (e.g., firewalls,intrusion detection systems, endpoint protection, encryption tools).
• Manage vulnerability management processes, including patch management and system hardening.
• Collaborate with other IT teams to ensure secure system architecture, network infrastructure, andapplication development processes.

Training & Awareness:

• Lead initiatives to promote security awareness across the organization by providing training to staff onbest practices for IT security.
• Regularly conduct workshops, seminars, and awareness campaigns to keep employees updated onemerging threats.

Reporting & Analysis:

• Provide regular security status reports and updates to senior management and relevant stakeholders.
• Present analysis on security incidents, metrics, and trends to inform decision-making.

Vendor Management:

• Manage relationships with external vendors, service providers, and consultants related to IT security
• solutions.
• Ensure third-party vendors comply with security standards and practices.

Requirements

• Education: Bachelor’s Degree in Computer Science, Information Security, or a related field
• Others: Familiarity with both on-premise and cloud-based IT infrastructure security.
• Experience: Minimum 10 years’ experience managing a security team and leading strategic securityinitiatives an added advantage.