- Design, implement, and manage security controls and policies across corporate IT systems.
- Own identity and access management, endpoint security, email security, and network security across the organization.
- Assess corporate systems and vendors, identify vulnerabilities, and recommend mitigation strategies.
- Establish governance, guardrails, and monitoring for employee tooling and its data-handling, access, and third-party risks.
- Manage vulnerability scanning, risk-based prioritization, remediation and patch SLAs, and closure tracking.
- Lead security awareness and phishing simulation programs.
- Support compliance, audits, penetration tests, and red team exercises, and ensure findings are remediated.
- Manage third-party security risks, including questionnaires, contract reviews, and ongoing vendor monitoring.
- Investigate security incidents and insider-threat concerns with HR, Legal, and IT.
- Work with stakeholders to integrate security requirements into IT projects and business initiatives.
Python