Senior Cybersecurity and Compliance Specialist

Senior Cybersecurity and Compliance Specialist Job Summary: As the Senior Cybersecurity and Compliance Specialist, you will lead the efforts to ensure the security of internal and clients' IT infrastructure and maintain compliance with various industry standards and regulations. You will oversee a Security Operations Center (SOC) team, develop and implement comprehensive security strategies, and serve as the primary advisor on all cybersecurity and compliance matters. Key Responsibilities: Design, implement, and oversee comprehensive cybersecurity solutions, including: Advanced endpoint security (EDR, XDR) Next-generation network security (NGFW, SD-WAN security) Cloud security architecture Advanced email security and anti-phishing measures Enterprise-grade Data Loss Prevention (DLP) solutions Lead the Security Operations Center (SOC) team, providing guidance and mentorship Develop and manage the organization's overall cybersecurity strategy Oversee and enhance the Security Information and Event Management (SIEM) system Direct vulnerability management programs and penetration testing initiatives Design and lead security awareness programs for clients and internal staff Architect and implement advanced Identity and Access Management (IAM) solutions Lead threat-hunting initiatives and manage the incident response program Develop and enforce comprehensive security policies and procedures Design and implement robust monitoring and logging solutions (e.g., Wazuh, ELK stack, Splunk) Ensure compliance with relevant standards and regulations (e.g., GDPR, SEC, FINRA, SOC 2, ISO 27001) Conduct high-level risk assessments and develop risk management strategies Oversee the preparation for security audits and manage relationships with auditors Collaborate with C-level executives and other department heads to integrate security best practices across all business operations. Stay abreast of emerging threats, technologies, and industry trends in cybersecurity. Represent the organization at industry conferences and events Manage the cybersecurity budget and ROI for security investments Required Skills and Qualifications: AS, BS, or MS in Computer Science, Information Security, or a related field 8 years of experience in IT security, with at least 3 years in a leadership role Advanced certifications (e.g., CISSP, CISM, CEH, GCIH, CRISC) Proven experience in developing and implementing enterprise-wide security strategies Deep knowledge of cybersecurity frameworks (e.g., NIST, CIS Controls) Strong understanding of cloud security architecture and best practices Experience with security orchestration and automated response (SOAR) platforms Excellent leadership and team management skills Strong analytical and problem-solving abilities Outstanding communication skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders