Responsibilities
- Design and implement mid and long-term security strategies, aligning them with business goals and technology roadmaps to ensure robust protection of digital assets.
- Collaborate across functions to integrate security practices into the broader organizational strategy.
- Identify, assess, and manage security risks, developing strategies to mitigate potential threats and vulnerabilities.
- Communicate risks and recommendations to senior leadership.
- Lead the transition from managed detection and response services to an in-house capability, ensuring seamless operational change and continuity.
- Develop and implement security monitoring and alerting strategies using Datadog and PagerDuty.
- Establish and manage an on-call incident response protocol to ensure swift and effective response to security incidents.
- Partner with the Privacy team to establish foundational data security practices and policies, driving data security initiatives that comply with international industry standards and regulations.
- Provide hands-on expertise to achieve and maintain PCI DSS certification.
- Ensure that security standards comply with industry regulations and best practices.
Requirements
- A minimum of 5 years in Security Engineering roles.
- Demonstrated ability to lead large scale security projects and initiatives effectively.
- Proven track record in implementing data security initiatives that meet industry standards.
- Hands-on incident response experience with a track record of managing and mitigating security incidents effectively.
- Experience with regulatory compliance standards and frameworks such as GDPR, PCI-DSS, or ISO 27001.
- Strong coding skills, with a focus on security-focused development.
- Proven proficiency in utilizing Datadog and PagerDuty for detection and response operations.
- Deep understanding of AWS security frameworks, practices, and tools to protect cloud-hosted environments.
- Strong communication skills with the ability to articulate complex security issues to technical and non-technical audiences.
Work Arrangement
Remote (Worldwide) — Cyprus, Ukraine, Poland, Spain, UK
