Cyber Security

What you will do.

• Coordinate the design, implementation, and maintenance of security measures within the department's systems.
• Coordinate the management of access controls and role-based permissions, as well as the review and hardening of technical accounts.
• Coordinate the maintenance and auditing of export permissions and configuration related to integrations and API access controls.
• Coordinate the implementation and maintenance of security monitoring and logging systems to detect and respond to threats.
• Coordinate the configuration of security alerts and threat monitoring, as well as the prevention of data exports.
• Coordinate the development and implementation of DLP strategies to prevent the outflow of sensitive data.
• Coordinate DRP strategies (defining RTO and RPO with business and platform teams), including recovery tests and simulations, in conjunction with relevant vendors and their support teams.
• Lead the preparation of a cyber crisis management plan for the department, defining the communication chain in case of an incident (internal and external), key personnel and their roles, and escalation procedures.
• Prioritize this plan for a specific domain, with planned extension to other department domains.
• Coordinate security assessments and audits with the internal cybersecurity team and support for platform teams, across all department domains.
• Participate in incident response activities related to security breaches or incidents affecting the department's systems: investigation of security events, containment of threats, implementation of corrective actions.
• Drive security awareness among department teams to promote best practices and reduce the risk of incidents.
• Create and maintain comprehensive documentation of the department's security configurations, policies, and procedures.