Infrastructure and Cybersecurity Manager

Infrastructure and Cybersecurity Manager

1. Design, implement, and manage IT infrastructure, ensuring alignment with the company's strategic objectives.
   
   
2. Design, develop and execute cybersecurity strategies to protect the organization's digital assets.
   
   
3. Oversee and maintain the cloud infrastructures, including configuration, monitoring, and resource optimization.
   
   
4. Implement security policies and procedures to protect company information and systems.
   
   
5. Conduct regular risk assessments and security audits to identify and mitigate vulnerabilities.
   
   
6. Collaborate with development and operations teams to ensure the integration of security practices into the software development lifecycle (DevSecOps).
   
   
7. Manage security incidents and coordinate responses to security breaches.
   
   
8. Oversee, develop and coordinate the SOC Service and Operations.
   
   
9. Stay updated with the latest trends and technologies in cybersecurity and infrastructure management.
   
   
10. Train and guide staff on security practices and the use of IT infrastructure.
    
    
11. Guide staff on infrastructure practices aligned with the company's requirements.
    
    

Minimum Requirements

1. Bachelor's degree in Computer Science, Systems Engineering, or a related field.
   
   
2. At least 5 years in infrastructure and cybersecurity roles, with a minimum of 2 years in leadership positions.
   
   
3. Proven experience in IT infrastructure management and cybersecurity.
   
   
4. Deep knowledge of Microsoft Azure, including Azure Active Directory, Azure Security Center, and Azure Sentinel.
   
   
5. On-premise and cloud infrastructure (AWS and Azure).
   
   
6. Relevant certifications such as Azure Solutions Architect, Azure Security Engineer, CISM, or similar.
   
   
7. Hands-on experience with cloud platforms, especially Microsoft Azure, and integration services such as Azure Logic Apps, Azure Functions, and Azure API Management.
   
   
8. Familiarity with healthcare data privacy regulations (e.g., HIPAA).
   
   
9. Strong leadership skills and the ability to work effectively in a team.
   
   
10. Excellent communication skills and the ability to explain technical concepts to non-technical audiences.
    
    

Additional Desired Skills

1. Knowledge and experience with Web Application Firewalls (WAF) for protecting web applications against threats such as SQL injection, XSS, and other OWASP top 10 vulnerabilities.
   
   
2. Familiar with Zero Trust Architecture and its implementation across enterprise environments.
   
   
3. Experience with Disaster Recovery (DR) planning and Business Continuity strategies.
   
   
4. Hands-on knowledge of Container Security and tools like Kubernetes or Docker.
   
   
5. Experience with Endpoint Detection and Response (EDR) tools for proactive threat monitoring.
   
   
6. Understanding of SASE (Secure Access Service Edge) frameworks and their deployment.
   
   
7. Knowledge of DevSecOps practices, including securing CI/CD pipelines.
   
   
8. Familiar with Data Loss Prevention (DLP) tools and strategies.