SOC Lead (Information Security Analyst)

Job Summary

Self motivated individual with skills to protect company information technology assets against unauthorized access, theft, and destruction. The Security Analyst will also be responsible for ensuring the company's cybersecurity capabilities are up to the standard. He/she shall conduct research and development on information security technologies, standards, tools and practices and based on that shall make recommendations to protect the company assets or improve current security posture.

Duties & Responsibilities

1. Supervises a team of Information Security Specialists/Associates to meet Information Security Standards and run a 24x7 Security Operations Center.

2. Drive the team to work on maintaining and attaining zero incident of successful malicious attack to the company and LRA IT Assets.

3. Prepares Information Security Policies and Procedures and has it institutionalized.

4. Reports any deviation or violation to the Information Security Policies and Procedures to Management.

5. Prepares Playbook for each type of information security incidents and cascades the same to all the teams involved in the process.

6. Acts on detected threats, attacks and malwares and works on the same until its remediation.

7. Documents information security threat detections and remediations and translates it into Activity Reports.

8. Prepares guidelines for monitoring and notification of information security threats and attacks in all IT environments being managed by management be it on-premise, cloud-based or hybrid.

9. Prepares financial reports (i.e., Total Cost of Ownership, Cost Comparison, Cost Projection) for information security related cost items.

10. Continuously keep abreast of new information security standards and recommend to management the relevant technologies that can be implemented to further strengthen the information security posture of LRA’s information technology assets.

11. In charge of securing IT assets in both the LTCP and Cloud environments being managed by the management.

12. Conducts InfoSec training, orientation and seminar for the management and its client LRA.

13. Conducts knowledge transfer to other members of the IT Operations and IT Infrastructure Teams.

14. Conducts presentation of proposed information security solutions to given business requirements or projects.

Job Specifications

Minimum Education Required

College graduate preferably computer/IT related course

Minimum Relevant Experience Required

At least 5 years working experience in Information Security

Other competencies, skills, licensure required

1. Must have any of the following Information Security Certifications: CEH, CISM, CompTIA Security+, CISP, CISA, SANS GIAC, etc.

2. Must have a deep understanding of Systems Administration, Network Administration, Database Administration.

3. Must have at least 3 years of information security experience in the Cloud preferably in AWS.

4. Must have a working knowledge of known Information Security Tools.

5. Must have a solid experience in administration of Windows and Linux Operating Systems.

6. Preferably with previous experience on Relational Database Management Systems (“RDBMS”).