Lead Information Security Engineer

Key Responsibilities:

• Security Architecture and Strategy:

  Design, implement, and maintain enterprise security architecture; develop and enforce security policies, standards, and best practices; evaluate and implement security tools and technologies to mitigate risks.

• Incident Response and Threat Management:

  Lead investigation and resolution of security incidents and breaches; develop and maintain incident response plans; perform threat modeling, vulnerability assessments, and penetration testing.

• Risk Management and Compliance:

  Conduct risk assessments and recommend mitigations; ensure compliance with regulatory frameworks (ISO 27001, NIST, GDPR, PCI DSS); collaborate with legal, compliance, and audit teams.

• Leadership and Team Development:

  Mentor and guide a team of security engineers and analysts; foster a culture of security awareness; integrate security into the DevSecOps lifecycle.

• Stakeholder Collaboration:

  Act as primary security liaison for executives, customers, and auditors; communicate security risks and recommendations to non-technical audiences; partner with product and engineering teams to embed security in all stages of development.