Key
Responsibilities
Security
Monitoring - Security Tool Design and Development:
–Conducts
security assessments of various products and services, analyzing potential
vulnerabilities and recommending mitigation strategies.
–Develops
advanced testing tools and methodologies to proactively identify and address
security weaknesses.
–Conducts
in-depth security design and coding (e.g., reviewing code, writing code for
complex investigation), providing advanced guidance and recommendations for
improvement.
–Participates
in reviews of security alerts.
Event
Response:
–Uses
expertise to recognize and escalate complex security violations, ensuring
prompt response and resolution.
–Takes
appropriate action to contain and mitigate security events, coordinating with relevant
teams and stakeholders.
–Contributes
to post-event reviews, providing insights and recommendations for strengthening
event response processes.
Compliance:
–Contributes
to compliance assessments, evaluating the effectiveness of security controls
and processes.
–Reviews
security compliance deliverables, providing recommendations for enhancing
adherence to internal and external obligations.
–Ensures
compliance with internal and external obligations, collaborating with relevant
stakeholders to implement necessary measures.
–Ensures
inventory systems are maintained and remain compliant from a security
perspective.
Business
Continuity Support:
–Provides
guidance on business continuity and disaster recovery plans, processes, and
procedures, considering potential risks and vulnerabilities.
–Ensures
the execution of business continuity plans to support critical systems and data
during disruptions, implementing appropriate measures and controls.
–Assesses
readiness for certification and/or audit, providing insights and
recommendations for enhancing preparedness.
Data
Security and Privacy:
–Recommends
best practices and independently applies data security tools and techniques,
such as encryption, hashing, masking, and access management, to ensure the
confidentiality and integrity of sensitive information.
–Conducts
thorough reviews of documentation and procedures related to data security,
identifying and recommending improvements to enhance overall security posture.
Research
and Innovation:
–Applies
industry security knowledge through engagement in research activities and
collaboration with colleagues to contribute to the development of innovative
security solutions.
–Stays
updated on emerging trends and evolving threats, identifying potential
implications for the organization and recommending appropriate actions.
–Explores
and evaluates novel techniques and technologies to address complex security
problems.
Core
Responsibilities
Planning
& Execution:
–Manages
and coordinates moderately complex tasks, monitoring timelines and deliverables
to ensure timely completion and adherence to requirements for a moderately
sized project or initiative.
–Efficiently
delegates, monitors, and prioritizes work across multiple projects, providing
technical oversight and adjusting plans to address shifts in resources or
timelines.
Collaboration
& Partnership:
–Collaborates
across the organization to align on expectations and achieve shared objectives.
–Leverages
understanding of business leaders, stakeholders, and/or customers to ensure
proposed solutions meet their needs.
–Supports
inclusivity by actively seeking and listening to diverse perspectives, ensuring
others feel heard and respected.
Problem
Solving:
–Identifies
and addresses moderately complex issues by analyzing a wide range of data
and/or information to identify solutions in accordance with standard practices.
–Proactively
escalates unresolved or critical issues with a thorough assessment and suggests
potential solutions.
–Reviews,
contributes to, and documents problem solving strategies.
Continuous
Learning:
–Pursues
learning opportunities to expand knowledge and skills and/or tools in new areas
and stays abreast of the latest industry trends and best practices.
–Proactively
seeks and leverages ongoing feedback and training to improve skills.
–Coaches
and mentors junior team members, fostering continuous learning and knowledge
sharing within and across teams.
Continuous
Improvement:
–Develops
ideas, recommends updates, and/or collaborates on the implementation of process
improvements to increase the efficiency and effectiveness of processes,
protocols, and workflows across teams, and evaluates the impact on key
stakeholders.
–Solicits
feedback from others on ideas for alternative approaches and methods for
continued improvement.
Performance
and Development:
–Contributes
to the talent development pipeline by participating in candidate interviews,
assessing candidates, and providing hiring recommendations.
