IT Security Architecture

Key Responsibilities

• Security Architecture: Define and integrate security controls into systems to meet security requirements and standards. Perform security reviews, analyze system designs, and verify the effectiveness of security controls for projects and changes.
• Application & Container Security Assessment: Execute security assessment processes using Static Application Security Testing (SAST) and Advanced Cluster Security (ACS). Maintain security gates across application and container environments, perform periodic scans, and track remediation progress until all risks are resolved.
• Penetration Testing: Manage end-to-end penetration testing activities, including defining the scope of work and managing the third-party engagement process from vendor selection through to budget approval. Report findings to management and actively track remediation status to ensure all identified risks are successfully closed.
• Certificate Management: Operate and maintain Digital Certificates and Encryption Keys to ensure robust data protection and secure communications across the organization.
• Phishing Simulation: Build the platform and coordinate security awareness exercises to enhance the overall security posture and employee awareness.