Key Accountabilities
- Manage and engineer endpoint protection solutions, including Microsoft Defender for Endpoint and CrowdStrike Falcon.
- Develop, enforce, and maintain endpoint hardening standards, ensuring secure configurations throughout the asset lifecycle.
- Align endpoint security initiatives with the broader Information Security strategic roadmap.
- Automate security operations using scripting languages (e.g., PowerShell, Python, KQL) to improve efficiency and consistency.
- Manage and maintain configuration scanning policies to ensure compliance with CIS Benchmarks and internal hardening standards.
- Collaborate with cross-functional teams to deliver endpoint security programs on time and within budget.
- Define and manage device control policies, ensuring compliance with regulatory and internal requirements.
- Support integration and policy enforcement through platforms such as Microsoft Intune.
- Drive successful delivery of network security projects, ensuring alignment with Group Information Security strategies and business objectives.
- Build awareness and provide support to Group IT Security, Group IT, and Business Units IT, to ensure understanding of security solutions and processes across the organization.
- Lead IT Security Engineering initiatives and projects, including solution selection, architecture definition, operations framework, and continuous improvement.
- Collaborate with business units and cross-functional teams to ensure consistent execution of security initiatives.
- Partner with the Head of IT Security Engineering and Group CISO to track and report on program progress and risks, providing regular updates to management.
- Provide technical leadership and mentorship to junior engineers and project teams.
- Continuously evaluate and recommend emerging technologies to strengthen the security landscape.
Experience
- Minimum of 8 years experience in IT Security Management, preferably within the Financial Services industry.
- Demonstrated success in delivering endpoint security projects and managing enterprise-grade security solutions.
- Regional exposure in IT Security Technical or Engineering roles.
- Strong analytical and problem-solving abilities, with a proactive and collaborative mindset.
- Bachelor's degree in Information Technology or a related discipline.
- Hands-on technical expertise across the NIST Cybersecurity Framework domains: Identify, Protect, Detect, Respond, and Recover.
- Good understanding of cloud environments and how networks operate within cloud architectures.
Knowledge & Technical Skills
- Relevant Information Security and Cloud certifications; CISSP (or equivalent) is an advantage.
- Proficiency in scripting and automation tools to streamline security operations.
- Proven track record in designing and implementing endpoint security solutions.
- Strong interpersonal and influencing skills to drive adoption and enforcement of IT Security Engineering programs.
- Excellent communication and presentation skills for engaging with stakeholders at all levels.
