System and Information Security Officer JB-4752

A long-standing and established company in the field of information security requires an experienced System and Information Security Officer

The role includes:

Management and leadership of information security policy in the organization, including writing procedures, controls and compliance with regulations.

Management of cyber risks and identifying weaknesses, including prioritizing prevention and protection actions.

Full handling of cyber events: identification, analysis, response, documentation and process improvement.

Implementation of security solutions such as SOC, DLP, IAM, encryption and traffic monitoring systems.

Information security training and awareness for all employees and management.

Work closely with IT, system, legal and operations departments to maintain a uniform line of security.

Management and protection of cloud environments (AWS) and virtualization environments (VMware), including hardening, monitoring and access controls.

Responsibility for system and server maintenance, including Active Directory, Windows Servers, Group Policies, and System Hardening." "s, including understanding complex topologies.

Practical experience with firewalls: Check Point, Palo Alto, Fortinet, Cisco writing rules, analyzing logs, handling events.

CISO and Microsoft system Engineer certification - mandatory

WAF mastery: setting up, tuning, writing rules and protecting against application attacks such as SQLi and XSS.

NGFW experience including IPS, URL filtering, application control and suspicious traffic monitoring.

Experience with Load Balancers (e.g. F5) setting up and management.

Experience in AWS cloud environments: hardening, IAM management, protecting EC2, S3 and built-in security solutions.

Experience in VMware environment: virtualization management, security and Host/VM hardening.

System knowledge: Windows Server management, Active Directory, Group Policies, Exchange, password policies and server hardening.

Mastery of security protocols: VPN, SSL, IPsec