Job Description

As a Security Operations Specialist, you will monitor and maintain security operations, ensuring alignment with regulatory requirements and business policies. You will actively contribute to improving the organizational security posture and support continuous compliance efforts. This role involves implementing robust security controls to safeguard systems and data. Furthermore, you will be responsible for responding effectively to security incidents within established frameworks.

• Align Managed Security Services (MSS) with the global Telecom Cybersecurity strategy and establish comprehensive cybersecurity policies and frameworks.

• Communicate complex risk postures and compliance status to senior management and customers through clear dashboards and reports.

• Provide proactive guidance to customers on security best practices and emerging compliance requirements.

• Implement and manage robust risk management frameworks, such as ISO 31000 or NIST RMF.

• Develop and maintain a central risk register, tracking mitigation strategies and treatment plans across client environments.

• Lead security risk assessments and audits to proactively identify and remediate vulnerabilities.

• Develop and test strategies for incident response and business continuity to minimize service disruptions.

• Ensure strict adherence to industry standards (e.g., ISO 27001, NIST CSF, GDPR) and utilize GRC tools for automated monitoring and streamlined audits.

Must-Have:

• 12+ years of experience in GRC, with at least 5 years specifically in Telecom or Managed Security Services (MSS).
• Deep understanding of telecom infrastructure (MPLS, 5G, IoT, SDN/NFV).
• Proficiency in security technologies such as Firewalls, SIEM, and encryption.
• Bachelor’s or master’s degree in computer science, Information Security, or Telecommunication Engineering.
• Exceptional stakeholder management, analytical thinking, and the ability to translate technical risks into business impact for executive audiences.

Nice-To-Have:

• Key Information Security Certification i.e. CISM (Certified Information Security Manager) and CISSP (Certified Information Systems Security Professional).
• Audit, Risk, and ISMS Certifications i.e. CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), and ISO 27001 Lead Auditor.