Resiliency Planning: Developing and implementing strategies to enhance the organization’s ability to withstand and recover from cyber incidents.
Risk Understanding: Identify and assess potential cyber risks and vulnerabilities, and develop mitigation strategies to enhance system resilience.
Security Architecture: Design and implement security architectures that enhance the resilience of information systems and networks.
Incident Management: Lead and coordinate incident response efforts, including preparation, detection, containment, eradication, and recovery from cyber incidents.
Vulnerability Management: Conduct regular vulnerability assessments and penetration testing to identify and mitigate security risks.
Business Continuity: Collaborate with business continuity and disaster recovery teams to integrate cyber resiliency into overall organizational resilience plans.
Testing and Validation: Perform regular testing and validation of cyber resiliency plans through simulations and table top exercises.
Collaboration: Work closely with IT, security, and business units to ensure a coordinated approach to cyber resiliency.
Reporting: Prepare detailed reports on cyber resiliency status, incidents, and recovery efforts for management and stakeholders
Continuous Improvement: Stay up-to-date with the latest cyber resiliency trends, threats, and technologies, and recommend improvements to enhance the organization’s resilience.
Technical Skills
Proficiency in security tools and technologies (e.g., SIEM, EDR, IDAM, DLP, Disk Encryption, Firewalls).
Proven experience in Vulnerability assessment and Penetration testing.
Strong knowledge of security frameworks and standards (e.g., NIST, ISO 27001)
Security Certification like CEH, ECSA, OSCP, CCSP, Security+, ISO27001 etc.