Associate Manager - Network Security

Associate Manager - Network Security

Responsibilities

Network & Cloud CyberSecurity Specialist

Network Security Tools and Technologies Management:

Configuration and management of network security tools (e.g., firewalls, intrusion detection/prevention systems, VPNs, network monitoring platforms, proxy, NAC etc).

Ensure network security technologies are properly tuned, updated, and optimized to detect and prevent security incidents.

Network Security Operations Management:

Manage the day-to-day operations of the network security team, ensuring effective monitoring, detection, and response to network security incidents.

Ensure that network security controls (e.g., firewalls, intrusion detection/prevention systems, VPNs, network monitoring tools) are deployed and optimized to protect the organization’s infrastructure.

Establish and lead a proactive approach to identifying and addressing emerging network threats, vulnerabilities, and attack patterns.

Incident Response and Risk Management:

Assist organization’s network incident response plan, ensuring rapid identification, containment, and mitigation of security incidents and breaches.

Lead root cause analysis of network security incidents, ensuring lessons learned are applied to enhance security measures.

Conduct risk assessments of network systems and lead efforts to implement appropriate risk mitigation strategies and controls.

Cloud Security & Zero Trust:

Implement and oversee cloud security controls and cloud firewalls.

Support Zero Trust Architecture (ZTA) strategies, ensuring robust authentication, authorization, and micro-segmentation.

Manage privileged access controls and enforce security policies to mitigate insider threats and external risks.

Collaboration with Cross-Functional Teams:

Partner with other departments, such as IT, compliance, legal, and risk management, to ensure alignment of network security strategies with broader organizational objectives.

Work closely with senior executives to provide updates on network security risks and vulnerabilities, offering recommendations for improvement.

Collaborate with other cybersecurity leaders to develop a cohesive, integrated approach to security across the enterprise.

Continuous Improvement and Innovation:

Stay informed on the latest network security trends, technologies, and emerging threats to ensure the organization is protected from evolving risks.

Drive the evaluation and implementation of new network security technologies and tools to enhance the organization’s cybersecurity capabilities.

Promote a culture of continuous improvement within the network security operations team by encouraging innovation and operational excellence.

Regulatory Compliance:

Ensure that network security operations adhere to relevant compliance requirements, ISO 27001

Oversee internal and external audits related to network security, ensuring all necessary documentation and evidence are provided.

Maintain a strong understanding of global regulatory trends and ensure that network security practices meet the highest industry standards.

Network Security Reporting and Documentation:

Prepare and deliver regular reports to executive leadership on the health of the network security program, including threat intelligence, incident status, risk assessments, and compliance status.

Ensure that network security processes and configurations are documented clearly and kept up to date.

Maintain and manage key performance indicators (KPIs) and metrics to track the effectiveness of network security initiatives.

Key Stakeholders - Internal

Department Heads

Internal Auditors

Risk Management Team

Cybersecurity & IT Infrastructure Team

Cloud & Network Engineering Team

Risk & Compliance Team

Key Stakeholders - External

Cloud Service Providers (AWS, Azure, GCP)

Security Auditors & Consultants

External Auditors

External Security Consultants

Qualifications

Educational Qualification:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Advanced degree (e.g., Master's, MBA) in Cybersecurity, Information Assurance, or a relevant discipline is highly desirable.

Certification:

Certifications :

CEH, AWS/Azure Security Specialty, Cisco CCNP Security, Checkpoint, paloalto certificates.

Work Experience (Range of years):

5+ years in network security, cloud security, and cybersecurity operations.