Cyber Security Expert

Operational / Technical Responsibilities

Cybersecurity Strategy

1. Define and implement the organization's cybersecurity strategy.
2. Align security objectives with business and IT goals.
3. Establish security policies, standards, and procedures.

Risk Management

1. Identify and assess cybersecurity risks.
2. Maintain a cybersecurity risk register.
3. Prioritize risks based on business impact and likelihood.
4. Recommend appropriate risk mitigation measures.

Security Operations

1. Oversee SOC/SIEM, security monitoring, threat detection, and incident response.
2. Monitor security alerts and emerging threats.
3. Ensure vulnerabilities and security incidents are addressed promptly.

Incident Response & Crisis Management

1. Lead response to cyberattacks, data breaches, ransomware, and other security incidents.
2. Establish and test incident-response and disaster-recovery procedures.
3. Coordinate with IT, legal, HR, communications, management, and external agencies when required.

Vulnerability & Patch Management

1. Oversee vulnerability assessments, penetration testing, and security audits.
2. Ensure critical vulnerabilities are remediated within defined timelines.
3. Monitor patch-management effectiveness.

Identity & Access Management

1. Ensure appropriate access controls and least-privilege principles.
2. Oversee MFA, privileged-access management, user access reviews, and authentication controls.

Data Security & Privacy

1. Protect sensitive and confidential information.
2. Establish data classification, encryption, DLP, retention, and access-control requirements.
3. Work with privacy/legal teams on applicable data-protection obligations.

Cloud, Network & Application Security

1. Ensure security architecture for cloud, networks, endpoints, applications, and APIs.
2. Integrate security into software development and technology projects.
3. Review major technology changes from a security perspective.

Security Awareness

1. Develop employee security-awareness and phishing-training programs.
2. Promote a strong security culture across the organization.