Cyber Security Lead in Clario

Position Overview

As the Cyber Security Lead, you will play a critical role in ensuring the security of our informational assets. You will act as a cross-functional or project manager, as we currently do not have a dedicated security team. You will lead our bounty program, coordinate with the external triage team, and work closely with internal engineering teams. You will report directly to the CIO and be responsible for risk assessment, mitigation planning, and implementing security best practices across the company.

Key Responsibilities 

• Lead Bounty Program: Manage and oversee the company’s bounty program, ensuring effective communication with the external triage team and corresponding internal teams.
• Risk Management: Conduct risk assessments, develop mitigation plans, and implement strategies to minimize security risks.
• Coordination and Collaboration: Work closely with internal engineering teams to ensure the protection of the company’s informational assets.
• Security Strategy Participation: Actively participate in the development of the security strategy led by the CIO and contribute to its implementation.
• Compliance and Governance: Ensure compliance with relevant security standards, regulations, and best practices.
• Incident Response: Lead the response to security incidents, conduct post-incident analysis, and implement measures to prevent future incidents.
• Training and Awareness: Conduct training sessions and awareness programs to educate employees about security best practices.

Qualifications

• Education: Bachelor’s degree in Computer Science, Information Security, or a related field. Master’s degree or relevant certifications (CISSP, CISM, CEH, etc.) is a plus.
• Experience: Minimum of 5 years of experience in cybersecurity, with a strong background in risk management, incident response, and security strategy development.
• Personal Attributes: Self-motivated, proactive, and able to work independently. Strong leadership and team collaboration skills.
• Skills and Knowledge:

1. Strong understanding of cybersecurity principles and practices.
2. Strong technical background in IT, including but not limited to a deep 
   understanding of network security principles, Active Directory, and AWS 
   security best practices.
3. Excellent project management and organizational skills.
4. Ability to communicate effectively with both technical and non-technical 
   stakeholders.
5. Experience with bounty programs and working with external triage teams.
6. Strong analytical and problem-solving skills.

Reporting

This position reports directly to the Chief Information Officer (CIO).