Information Security Manager at Harmony SASE

Tasks

• Align security policies standards and controls
• Build operate improve ISMS
• Collect evidence for audits
• Conduct threat modeling
• Coordinate internal/external audits
• Coordinate security incident response
• Deliver security training
• Design operate security automation
• Develop AI secure software development lifecycle framework
• Drive security findings to remediation
• Embed security into SDLC and CI/CD pipelines
• Lead Product Security Team
• Maintain compliance roadmap
• Manage GDPR compliance
• Manage ISO IEC 27001 compliance
• Manage SOC 2 Type II compliance
• Manage identity and access governance
• Manage third party vendor risk program
• Operate application security tooling stack
• Perform secure architecture reviews
• Promote secure coding practices
• Provide security due diligence support
• Remediate audit findings to closure
• Respond to security questionnaires and RFPs
• Run enterprise risk assessments

Perks/Benefits

• N/A

Skills/Tech-stack

800-53 | ASPM | Access Management | Application Security | CI/CD | Cloud Controls Matrix | Cloud controls | Cyber Essentials | DAST | DORA | Development Lifecycle | FedRAMP | GDPR | Governance Risk | Governance risk compliance | HIPAA | ISO 27001 | Identity and Access Management | Identity and access | Incident Response | Information Security Management | Information Security Management System | Information security | Least Privilege | Management System | NIST 800 | NIST 800-53 | NIST CSF | OWASP Top | OWASP Top 10 | PCI DSS | Risk Management | Risk compliance | SAST | SCA | SOC 2 | Secret Scanning | Secure Architecture | Secure Coding | Secure Software | Secure Software Development | Secure Software Development Lifecycle | Security Automation | Security Management System | Software Development Lifecycle | Third Party | Third-Party Risk | Third-party risk management | Threat modeling | Top 10