Email Security Lead

Email Security Lead

Role Summary

We are seeking a Lead – Email & Messaging Security to act as the primary client-facing subject matter expert for enterprise email security. The role will own the design, implementation, and optimization of Tessian, Proofpoint, and Mimecast solutions, partnering closely with client stakeholders to protect against phishing, malware, data loss, and business email compromise (BEC).This role requires a blend of deep technical expertise, advisory capability, and stakeholder engagement.

Key Responsibilities

• Serve as the primary point of contact for client email and messaging security initiatives
• Lead design, deployment, and ongoing operations of

  Tessian, Proofpoint, and Mimecast

• Provide security advisory and best-practice recommendations aligned to client risk and business needs
• Own email security architecture across Microsoft 365 / Exchange Online
• Lead investigation and response for high-severity email threats (phishing, impersonation, BEC)
• Drive policy tuning, threat intelligence integration, and false-positive reduction
• Present security posture, metrics, and improvement plans to client stakeholders
• Coordinate with client SOC, IT, and Compliance teams to align processes and escalations
• Mentor delivery resources and ensure adherence to agreed SLAs and standards
• Support audits, risk assessments, and client security reviews.
• Will partner closely with the IT Ops for email delivery and the Global Cyber Fusion Incident Response team to provide support for Incident Response and Threat Response Monitoring.
• Requires a solid understanding of Entra ID for users and group management. He is also responsible for documenting policy tuning runbook across Mimecast and Tessian, and will also help evaluate next gen cyber solutions related to Email and DLP.

Required Skills & Experience

• 7+ years of experience in Cybersecurity, with strong focus on Email/Messaging Security
• Hands-on experience with

  Tessian, Proofpoint, and/or Mimecast

• Strong knowledge of:
• Phishing, social engineering, and BEC threats
• Email authentication (SPF, DKIM, DMARC)
• DLP and user behavior analytics
• Experience securing Microsoft 365 / Exchange Online environments
• Proven ability to communicate technical risks to non-technical client stakeholders
• Strong documentation and presentation skills
• Experience in consulting or managed security services (MSSP)
• SIEM/SOAR integrations (Splunk, Sentinel, QRadar)
• Security certifications: CISSP, CISM, CCSP, Security+
• Experience supporting regulated enterprise clients