Traydstream
Website:
traydstream.com
Job details:
Traydstream is seeking an experienced Information Security Manager to join our team. We run 70+ Cloud based production & non-production Enterprise SaaS environments for major Banking Clients and Corporations, many of these are electronically integrated with the clients own systems. Coupled with this we have our own Enterprise with more than 150 people and their related security challenges, for example, email, laptops and data sharing security.
Responsibilities
- Design, build, review and audit enterprise-class security systems, both for our client’s production environments and for our own internal Enterprise.
- Align standards, frameworks and security with overall business and technology strategy.
- Security architecture, demonstrating solutions delivery, principles and emerging technologies. Designing and implementing security solutions, including continuous monitoring and making improvements to those solutions, working with an information security team.
- Create, develop and maintain comprehensive security documentation, including policies, procedures, processes and incident response plan.
- Utilize and streamline ITSM and SIEM tools for effective security monitoring and incident response.
- Implement/manage SAST/DAST, SCA and penetration testing to identify vulnerabilities.
- Identify and communicate current and emerging security threats and trends.
- Design security architecture elements to mitigate threats as they emerge.
- Create solutions that balance business requirements with information and cyber security requirements.
- Review and identify security design gaps in existing and future proposed architectures and recommend changes or enhancements.
- Act as point of escalation for IT Security issues and exceptions.
- Partner with key stakeholders, including Chief BISOs and IT management, to act as mediator and subject matter expert on Information Technology Security topics. Ensure a common understanding of Information Technology Security risks and their implications for the Group and for their scope of responsibility.
Your Skills and Experience
- Experience: 10 – 15 years.
- Cloud and application security: Security considerations of cloud computing, including data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks. Proven experience in application and infrastructure security.
- Multi-cloud security: Practical understanding of securing workloads across cloud platforms, including IAM, network security, data protection, monitoring, vulnerability management, and regulatory compliance.
- Identity and access management: Broad understanding of IAM principles, with hands-on experience working with Microsoft Entra ID, including identity governance, access controls, authentication, conditional access, and user lifecycle management.
- AI security: Understanding of AI/ML security risks and governance, including secure use of generative AI tools, protection of sensitive data, prompt and output validation, model-related risk assessment, and alignment with emerging AI security standards and regulatory expectations.
- Endpoint and network security: Best network security practices and anti-virus programs, installation, patch management, endpoint protection and OS hardening.
- Enterprise security: Strong understanding of Enterprise Security, including email, hardware, API and other external connectivity, including a good understanding of industry standard tools.
- Certifications: One or more professional certifications such as CISM, CISSP or CCSP.
- Communication: Excellent communication and interpersonal skills, with the ability to effectively communicate complex compliance concepts to technical and non-technical stakeholders.
- Execution: Proven ability to work independently, manage multiple priorities and meet deadlines.
- Problem solving: Detail-oriented with strong organizational and problem-solving abilities.
- Collaboration: Strong team player with the ability to collaborate and build positive working relationships across all levels of the organization.
- Preferred background: Experience of Enterprise level security in a large organization, preferably Banking Technology.
Click on Apply to know more.
