Information Security & Risk Management Manager

Key Skills:

Roles and Responsibilities:

• Develop and implement security policies and procedures in alignment with NIST SP 800-53r5 and NIST CSF 2.0.
• Conduct vulnerability assessments and penetration testing using tools such as Qualys and CrowdStrike Falcon.
• Manage security incidents and coordinate threat detection and remediation efforts.
• Oversee security baseline auditing and ensure compliance with patch management protocols.
• Collaborate with cross-functional teams to assess IT risks and develop risk treatment plans.
• Provide hands-on guidance and training on security best practices and tools.
• Stay updated on the latest security threats and trends to enhance the organization's security posture.

Skills Required:

• Strong expertise in NIST SP 800-53r5 and NIST Cybersecurity Framework (CSF) 2.0.
• Proven experience in vulnerability management, vulnerability assessment, and penetration testing (VAPT).
• Hands-on experience with security tools such as Qualys, CrowdStrike Falcon, ESM Manager, HUBQ, and SIEM platforms.
• In-depth knowledge of threat detection, incident response, and remediation processes.
• Experience in security baseline auditing and patch compliance management.
• Exposure to IT risk assessments, risk treatment planning, and remediation tracking.
• Ability to lead security initiatives across cloud and on-premises environments.
• Strong leadership, communication, and stakeholder management skills.

Education: