Information Security Lead (Defensive)

Role overview

Key responsibilities

• Lead security architecture and design reviews across IT, cloud, and product initiatives.
• Drive GCP and AWS cloud security, including IAM, cloud security posture, and infrastructure security.
• Lead Secure SDLC and DevSecOps, including application security and CI/CD security tooling.
• Own vulnerability management and remediation, penetration testing, and red team engagements.
• Oversee endpoint, infrastructure, and network security, including EDR, DLP, and firewall security.
• Lead detection engineering, threat intelligence, incident response, and complex investigations.
• Manage and develop security engineers and analysts through mentoring, performance management, and career development.
• Partner with Engineering, IT, Compliance, and other teams to improve security posture and standards.

Experience and expertise

• At least 5 years of cybersecurity or information security experience, including technical leadership or senior-level responsibilities.
• Experience leading programs across security architecture, cloud security, vulnerability management, and application security.
• Strong defensive and offensive security knowledge, including penetration testing, red/purple teaming, threat hunting, and incident response.
• Hands-on experience with SIEM, EDR/XDR, vulnerability management, CSPM, DLP, and security monitoring platforms.
• Strong knowledge of GCP and/or AWS, IAM, cloud security, and infrastructure security.
• Experience with DevSecOps, Secure SDLC, SAST, DAST, SCA, and container security.
• Strong scripting and automation skills and ability to develop or oversee security tooling and integrations.
• Knowledge of SAMA CSF, NCA ECC, PCI-DSS, and ISO 27001.
• Experience in a regulated FinTech or banking environment.
• Strong technical leadership, stakeholder management, and team development skills.

Required certifications

• CISSP/CISM and OSCP or equivalent certifications are required.