Regional Senior Cyber Security Engineer

Responsibilities:

• Design and maintain secure authentication and authorization architectures for internal systems and external partnerships.

• Identify, assess, and effectively communicate security risks to relevant stakeholders.

• Lead the implementation of cloud security architecture (including Azure, Microsoft 365, Teams, and iManage Cloud).

• Develop and maintain detailed documentation for all security operations and processes.

• Foster transparent communication and collaboration within the global security team.

• Partner with internal departments and leadership to meet security objectives.

• Ensure compliance with change control policies and communicate changes to stakeholders.

• Stay updated on emerging security trends and threats.

• Analyze data from Data Loss Prevention (DLP) systems to ensure policy compliance.

• Administer DLP systems, define protective policies, and develop incident response workflows.

• Establish metrics to assess DLP effectiveness.

• Contribute to the creation and enforcement of organizational information security policies.

• Manage assigned security-related projects.

• Respond to information security incidents and maintain the incident response plan.

• Investigate root causes of security incidents and recommend mitigation strategies.

• Oversee access controls and security configurations for information systems.

• Assist in developing security policies to meet regulatory and client requirements.

• Ensure monitoring systems and alert notifications align with business needs.

• Conduct risk assessments for vendors, projects, and systems.

• Lead the creation and review of IT policies and perform pre-production security audits.

• Coordinate third-party security program reviews and address any identified gaps.

• Monitor physical data security practices and recommend improvements.

• Promote responsible use of IT resources across the organization.

• Lead security awareness initiatives and training programs.

• Collaborate with IT teams to ensure alignment of security standards with technology upgrades and deployments.

• Maintain updated security awareness materials on internal platforms.

• Conduct investigations in collaboration with HR, IT, or legal teams and provide necessary findings.

• Participate in Business Continuity and Disaster Recovery planning.

• Perform additional tasks as needed to support organizational goals.

• Available for up to 20% domestic and international travel.

Requirements:

• Bachelors degree in a related field (or equivalent experience).

• CISSP or CEH certification preferred.

• Minimum of 5 years of experience in an information security role.

• Strong knowledge of CISSP and CEH standards.

• Familiarity with ISO 27002 and security best practices.

• Solid understanding of networking, authentication methods, and firewall security.

• Experience with cloud environments, especially Azure and Microsoft 365.

• Knowledge of Disaster Recovery and AI-related security practices.

• Familiarity with DLP tools and incident handling processes.

• Proficiency with Microsoft Office applications.

• Experience with tools such as Microsoft Defender for Endpoint, CyberArk, Rapid7, Palo Alto, and SIEM products is a plus.

• Strong verbal and written communication skills, with the ability to engage professionally at all levels.

• Proven ability to manage multiple priorities in a dynamic, fast-paced environment.

• Self-motivated, detail-oriented, and customer-focused.

• Demonstrates discretion, confidentiality, and strategic problem-solving skills.

• Ability to balance business objectives with security considerations.

• Open to innovation and willing to challenge existing processes.

• Capable of occasionally lifting items up to 20 lbs.