About the role
-Strong knowledge of end-user tools (laptops, desktops, virtualization, remote access, printers, office 365) and related infrastructure services (telephony, messaging, directories, office automation, security).
-Experience in conducting risk assessments and security evaluations of desktop services and on-premises applications/infrastructure.
-Ability to assess and prioritize threats, vulnerabilities, risks, and attack vectors, and develop effective mitigation strategies.
-Skilled in integrating security into projects and infrastructure following secure-by-design principles
-Enforce Group policies, standards, procedures and security best practices within the department.
-Communicate risk and security recommendations clearly to stakeholders.
-Support security audits (internal and regulatory) and monitor timely closure of audit recommendations.
-Act as the security expert and point of contact for operational security and risk management activities.
-Monitoring and follow-up of vulnerabilities on managed perimeters.
- Define and report on relevant KPIs/KRIs and security alerts