System Security Practitioner

Overview

Security Transformation Practitioner /

Functions to Be Performed

• Lead the design and implementation of security architectures and controls across enterprise platforms, cloud environments, applications, and data layers.
• Drive security transformation initiatives by embedding security requirements throughout the full project lifecycle.
• Conduct security risk assessments and architecture reviews aligned with industry frameworks and regulatory requirements.
• Support solution planning, effort estimation, and pre sales activities for security engagements.

Responsibilities

• Act as a

Security Subject Matter Expert

• , independently owning complex deliverables and leading security workstreams.
• Perform and oversee
• security risk assessments
• , threat modeling, and control gap analysis using frameworks such as

ISO 27001, NIST, CIS, and OWASP

• .
• Lead
• security administration and data security
• initiatives, including IAM concepts, privileged access management, encryption, and data protection strategies.
• Guide
• application security
• practices, including secure SDLC integration, vulnerability remediation, and DevSecOps enablement.
• Plan and oversee
• security testing activities
• , including vulnerability assessments, penetration testing coordination, and remediation tracking.
• Contribute to the continuous improvement of security policies, standards, and procedures based on emerging threats and industry best practices.
• Evaluate and support the adoption of new security tools and technologies to strengthen organizational cyber resilience.
• Communicate security risks, findings, and recommendations clearly to senior technical and non technical stakeholders.
• Mentor junior team members and actively contribute to knowledge sharing within the security practice.

Experience

• 8 12 years of overall experience
• in information security, cybersecurity, or IT risk management.
• Minimum 3 5 years of experience
• in a lead or supervisory role delivering security solutions or managing security workstreams.
• Proven experience in
• enterprise security architecture, security transformation programs, or large scale security implementations
• .
• Hands on experience with
• security risk assessments, security testing, and control design
• in complex environments.
• Prior experience in
• client facing or consulting roles
• is strongly preferred.
• Experience working with
• cloud, application, and data security initiatives
• in regulated or large enterprise environments.

Required

• Advanced proficiency in

Security Administration

• Advanced proficiency in

Security Risk Assessment

• Advanced proficiency in

Security Testing and Vulnerability Management

• Strong analytical, leadership, and stakeholder management skills
• Ability to work independently and lead small to mid sized teams

Preferred

• Advanced proficiency in

Data Security

• (encryption, data classification, data loss prevention)
• Intermediate proficiency in

Application Security

• and secure SDLC practices
• Experience with cloud security and modern security architectures
• Excellent communication skills and executive level reporting experience