IT Security

Position Summary:

NPL is seeking an experienced and proactive IT Security Lead to strengthen the organization's cybersecurity posture, manage information security risks, ensure regulatory compliance, and safeguard critical business systems and data. The incumbent will be responsible for driving cybersecurity initiatives, implementing security frameworks, managing security operations, and leading incident response and risk management programs across the enterprise.

Key Responsibilities:

Cybersecurity Governance & Strategy

• Develop and implement the organization's cybersecurity strategy aligned with business objectives.
• Establish and maintain information security policies, standards, procedures, and controls.
• Drive cybersecurity awareness programs across the organization.
• Conduct security risk assessments and recommend mitigation measures.

Security Operations & Monitoring

• Lead Security Operations activities including threat monitoring, incident detection, and response.
• Manage SIEM, EDR, SOC, DLP, and endpoint security solutions.
• Monitor security events, vulnerabilities, and emerging cyber threats.
• Coordinate with internal teams and external partners during security incidents.

Infrastructure & Network Security

• Ensure security of firewalls, switches, routers, VPNs, wireless networks, and internet-facing systems.
• Manage network security controls including IPS/IDS, WAF, and secure remote access.
• Review and approve security architecture for new projects and infrastructure deployments.

Identity & Access Management

• Oversee user access management processes.
• Implement least-privilege and role-based access controls.
• Manage Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and SSO solutions.

Vulnerability Management

• Conduct regular vulnerability assessments and penetration testing.
• Track remediation activities and ensure closure within defined SLAs.
• Coordinate periodic security audits and compliance reviews.

Compliance & Risk Management

• Ensure compliance with ISO 27001, DPDP, and other applicable standards.
• Manage third-party security assessments and vendor risk management.
• Support internal and external audits.

Incident Response & Business Continuity

• Lead cybersecurity incident investigations and root cause analysis.
• Develop and maintain Incident Response Plans and Cybersecurity Playbooks.
• Collaborate with IT teams on Disaster Recovery (DR) and Business Continuity Planning (BCP).

Security Projects

• Drive implementation of cybersecurity projects and technologies.
• Evaluate and recommend security tools, platforms, and services.
• Prepare budgets and manage cybersecurity-related procurement.

Required Technical Skills:

Security Technologies

• SIEM (Microsoft Sentinel, QRadar, Splunk)
• EDR/XDR (Microsoft Defender, CrowdStrike, Sentinel One)
• DLP Solutions
• Email Security Platforms
• WAF and Network Security Solutions
• Vulnerability Management Tools understanding

Infrastructure & Cloud Security

• Microsoft 365 Security Stack
• Azure Security Center/Defender for Cloud
• Active Directory & Entra ID
• Firewall Management (Fortinet, Palo Alto, Sophos, Check Point)
• VPN & Remote Access Security
• Cloud Security Controls (Azure)

Security Frameworks

• ISO 27001
• Zero Trust Architecture
• DID ( Defence and Depth Model)

Qualifications

• Bachelors degree in computer science, Information Technology.
• Master's Degree preferred.

Desired Certifications

• CISSP
• CISM

Experience Requirements

• 7+ years of overall IT experience.
• Minimum 5 years in Information Security or Cybersecurity roles.
• Experience in managing enterprise security infrastructure and compliance programs.

Key Competencies

• Strong stakeholder management.
• Incident response and crisis management skills.
• Risk assessment and analytical thinking.
• Excellent communication and presentation skills.
• Ability to lead cross-functional teams and drive security culture.