Security Infrastructure Management: Administer and maintain our IT security infrastructure, including firewalls, intrusion detection/prevention systems, antivirus software, and encryption technologies
Security Policy Development: Develop, implement, and enforce IT security policies, standards, and procedures to protect against unauthorized access, data breaches, and other security threats
Access Control: Manage user access permissions and privileges, ensuring that access rights are granted and revoked appropriately based on job roles and responsibilities
Vulnerability Management: Conduct regular vulnerability assessments and penetration tests to identify and remediate security weaknesses in our systems and networks
Incident Response: Respond to and investigate security incidents, including breaches, malware infections, and unauthorized access attempts, and implement corrective actions to mitigate risks and prevent recurrence
Security Awareness Training: Develop and deliver security awareness training programs to educate employees about best practices for maintaining information security and preventing social engineering attacks
Compliance: Ensure compliance with relevant regulations, standards, and frameworks (eg, GDPR, HIPAA, ISO 27001) by conducting audits, assessments, and gap analyses as needed
Security Documentation: Maintain accurate documentation of IT security policies, procedures, configurations, and incident reports to support audit and compliance requirements
Security Monitoring: Monitor security logs and alerts generated by security systems and tools, investigating and escalating anomalies or suspicious activities as necessary
