Senior Information Security Specialist

Position Purpose:

Support the Information Security function to ensure the security of information assets and help in all assurance activities related to the availability, integrity and confidentiality of the customers, business partners, employees and business information, in compliance with the organization information security policies and standards.

Role Description:

1. Information Security Strategy & Governance
2. Risk Management & Incident Response
3. Security Architecture & Design
4. Security Operations & Monitoring
5. Training & Awareness
6. Vendor & Third-Party Risk Management
7. Reporting & Documentation

Job Specific Knowledge and Skills:

• In-depth knowledge of Information Security Governance, Risk Management, and Compliance (GRC).
• Experience with Vulnerability Management, Penetration Testing (VAPT), and Secure SaaS Product Development.
• Strong understanding of SaaS security, cloud security architectures, and DevSecOps methodologies.
• Familiarity with ISO 27001, NIST Cybersecurity Framework, CIS Controls, SOC 2, GDPR, and PCI DSS.
• Ability to engage, influence, and collaborate with senior executives, IT teams, and product teams.
• Strong communication and reporting skills, ensuring executive stakeholders (including the CFO) understand key security risks and required actions.
• Ability to bridge the gap between security, compliance, and business competitiveness in SaaS development.

Preferred Qualifications & Experience:

1. Minimum of 5-7 years of experience in information security or cybersecurity, with at least 3 years in a senior or specialized role.
2. Proven experience with security technologies, including firewalls, encryption, SIEM tools, IDS/IPS, and endpoint security solutions.
3. Experience conducting risk assessments, vulnerability management, and security audits.
4. Experience with regulatory requirements such as GDPR, HIPAA, PCI-DSS, or SOX.
5. Familiarity with incident response, forensics, and disaster recovery planning.