Cybersecurity Expert

The Cybersecurity Expert is responsible for safeguarding the organization’s information systems, networks, and data against cyber threats. This role involves designing, implementing, and monitoring security measures, ensuring compliance with industry standards and regulations, and responding effectively to incidents. The Cybersecurity Expert should enhance and build a secure digital environment that supports the organization’s operations and strategic goals. Key Responsibilities: • Security Strategy & Governance: o Implement, and maintain cybersecurity policies, procedures, and standards in compliance with local standards. o Conduct risk assessments and develop mitigation strategies. o Ensure compliance with international security frameworks (ISO 27001, NIST, CIS, etc.) and local regulatory requirements. o Provide Infrastructure security assessment Strategy. o Response to Internal and External Auditors. • Infrastructure & Network Security: o Design and implement secure network architectures, firewalls, VPNs, IDS/IPS, and endpoint protection. o Monitor systems for vulnerabilities, anomalies, and unauthorized access o Follow up with concerned teams for vulnerabilities and misconfiguration mitigation. o Coordinate patch management and system hardening activities. • Threat Management & Incident Response: o Monitor, analyze, and respond to security events from SIEM, SOC, and threat intelligence sources. o Should Lead incident response activities. o Conduct post-incident reviews and develop preventive measures. • Identity & Access Management (IAM): o Manage authentication, authorization, and access controls. o Implement Zero Trust and least-privilege principles. • Security Awareness & Training: o Conduct cybersecurity awareness programs for employees. o Provide technical guidance to IT teams. • Emerging Technologies & Research: o Stay updated on evolving cyber threats, attack vectors, and security tools. o Recommend and evaluate new security technologies and solutions (e.g., AI-driven security, cloud security). • Knowledge Transfer o Technical expertise with the critical function of mentoring, training, and developing internal capabilities. Requirements Qualifications & Skills: • Master’s degree in Computer Science, Information Security, or related field. • Relevant certifications such as CISSP, CISM, CEH, CompTIA CySA+, or GIAC. • Proven experience in cybersecurity roles (minimum 15+ years). • Strong knowledge of network protocols, firewalls, IDS/IPS, SIEM, vulnerability management, and incident response. • Experience with cloud platforms (AWS, Azure, GCP) security controls. • Analytical, problem-solving, and communication skills. • Ability to work under pressure and respond quickly to security incidents. Preferred Attributes • Experience in Security Operations Centers (SOC). • Knowledge of regulatory frameworks (ISO 27001). • Hands-on experience with penetration testing and ethical hacking. • Strong collaboration skills to work with cross-functional teams.