JOB ROLE

The GM - Cybersecurity Operations position reports to the Head of Cybersecurity. This

position is responsible for day-to-day operations across all security platforms and

technologies. This position will also take up the administrative functions, including cost and

budget management. This position is also responsible for catering to all access management

requests and changes. This role is also responsible for identifying, analysing, monitoring,

mitigating, and managing threats and vulnerabilities to IT systems and networks.

The GM - Cybersecurity Operations will use defensive measures and multi-source

information to report events and respond to incidents. You will use monitoring and analysis

tools to identify and analyse events and to detect incidents.

Responsibilities

 Perform daily monitoring, maintenance, and improvements as needed to the

security solutions deployed across Trillion Loans.

 Maintain cyber threat situational awareness of internal and external threats and

vulnerabilities through enhanced monitoring capabilities and oversight of systems

and processes used to assess security.

 Monitor users, applications, networks, systems, and access to physical assets

(includes intrusion prevention/detection, email/spam filtering, and web filtering).

 Perform periodic review of audits logs (including review and retention) of

applications, networks, systems, and access to physical assets.

 Govern periodic user access reviews across Trillion Loan’s registered users and

report any discrepancies.

 Conduct physical and logical security control assessments (vulnerability assessment),

security monitoring, detection, and security status reporting to enable informed

decisions.

 Work with internal teams and third parties to scan, analyse, and apply

countermeasures for vulnerabilities.

 Ensure Key Performance Indicators and Security metrics for each of the Security

capabilities deployed are measured periodically, and performance is reported to

appropriate stakeholders.

 Uses data from cyber defence tools to analyse events within their organization to

detect and mitigate cyber threats.

 Tests, implements, deploys, maintains, and administers hardware and software that

protect and defend systems and networks against cybersecurity threats.

 Provides general cybersecurity support. Assists in cybersecurity tasks.

 Develops, evaluates, analyses, and identifies weaknesses and improvements to

cryptography systems and algorithms.

 Detail-oriented approach needed to recommend and implement strategic

improvements on a range of data privacy and data protection issues.

 Develops, tests, and maintains systems’ security. Analyses security of operations and

integrated systems.

 Performs vulnerability assessments of systems and networks. Identifies where they

deviate from acceptable configurations or applicable policies.

 Measures effectiveness of defence-in-depth architecture against known

vulnerabilities.

 Conducts authorized attempts to penetrate computer systems or networks and

physical premises, using realistic threat techniques, to evaluate their security and

detect potential vulnerabilities.

 Investigates, analyses, and responds to cybersecurity incidents.

 Collects and analyses digital evidence and investigates cybersecurity incidents to

derive useful information to mitigate system and network vulnerabilities.

 Identifies, collects, examines, and preserves evidence using controlled and

documented analytical and investigative techniques.

 Analyses (by disassembling and/or decompiling) malicious software, understands

how it works, its impact, and intent, and recommends mitigation techniques and

incident response actions.

 Collects and analyses multi-source information about cybersecurity threats to

develop a deep understanding and awareness of cyber threats and actors’ Tactics,

Techniques, and Procedures (TTP), to derive and report indicators that help

organizations detect and predict cyber incidents and protect systems and networks

from cyber threats.

 Proactively searches for undetected threats in networks and systems, identifies their

Indicators of Compromise (IOCs), and recommends mitigation plans.

PROFILE REQUIREMENTS

Professional Experience

 At least 10+ years of experience in Cybersecurity.

 Maintain certification in CISA, CISM, ISO 27001 LA, or equivalent.

 Experience in using various Cybersecurity Tools.

 Strong understanding of Information Technology, Cloud and IT Security.

 Basic knowledge of working across diverse teams to facilitate solutions.

 Managerial-level role requiring advanced skills and a high level of proficiency.

 Works independently with minimal guidance and frequent initiative or independent

judgment opportunities.

 Leads in a specialist area.

 Uses best practices and knowledge of technologies and appropriate processes.

 Serves as a mentor for less experienced team members.

Academic Qualifications

 Bachelor degree in computer science or equivalent.

Competency Requirements

 In-depth understanding of regulatory compliance requirements and designing the

associated policies and procedures (NCA, ISO 27001, NIST, PCI DSS, GDPR, etc.).

 Strong knowledge of data privacy and data protection regulation. Sufficient

knowledge of information technology and data management systems required.

Trillionloans

More Information