Description
At TNET, we are looking for an experienced Head of Information Security who will be responsible for developing the security of the company and its digital platforms, managing cyber risks, and ensuring the effectiveness of security controls. The role combines strategic vision, technical expertise, and practical collaboration with teams.
Responsibilities
•Prepare the information security strategy, annual action plan, and budget
•Set priorities based on business risks
•Develop and implement security policies, standards, and procedures, and monitor their execution
•Assess security risks to infrastructure, applications, cloud environments, and data, and coordinate mitigation measures
•Develop the vulnerability management process: scanning, penetration testing, remediation prioritization, and verification of results
•Manage security monitoring, collaboration with the SOC, and incident response processes; analyze root causes and prevent recurrence
•Develop controls for access and privileged account management, data classification, and data loss prevention
•Coordinate the selection and implementation of EDR, DLP, PAM, SIEM, and other security systems, and evaluate their effectiveness
•Collaborate with Development, DevOps, and IT Operations teams to improve secure architecture and development processes
•Participate in assessing security requirements for Business Continuity and Disaster Recovery plans, conducting Business Impact Analysis (BIA), defining RTO/RPO metrics, and testing and improving plans
•Assess the security of vendors and partners
•Coordinate audits and the implementation of relevant recommendations
•Raise employee security awareness and organize practical training
•Regularly report security metrics, significant risks, and the status of action plans to management
•Develop controls focused on the security of digital products and users, including account protection, authentication, API security, and prevention of automated attacks
•Identify opportunities to automate security checks and controls, and implement practical solutions together with technical teams
Requirements
•At least 5 years of experience in information security or cybersecurity, including at least 2 years of experience leading a team, function, or significant security projects
•Ability to independently lead initiatives, solve problems practically, and set risk-based priorities with limited resources
•Practical knowledge of the security of web platforms, networks, Linux/Windows systems, and cloud infrastructure
•Experience in security risk assessment, vulnerability management, and incident response
•Experience working with security technologies: EDR, SIEM, IAM/MFA, WAF; knowledge of DLP and PAM systems
•Knowledge of application security, OWASP principles, and the Secure SDLC
•Knowledge of ISO/IEC 27001 and NIST frameworks and ability to apply them in practical processes
•Experience coordinating technical and business teams, managing projects, and working with vendors
•Experience planning team work, setting priorities, assigning responsibilities, and supporting and developing employees
•Ability to explain complex technical issues clearly to management and propose risk-based decisions
•Working knowledge of Georgian and English
Nice to have
•Experience with high-traffic digital platforms, in e-commerce, or in the technology or financial sectors
•Experience securing AWS, Kubernetes, containers, and CI/CD processes
•Experience implementing DLP/PAM, developing a SOC, or creating an Information Security Management System (ISMS)
•CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Lead Auditor, or another relevant professional certification
•Knowledge of PCI DSS, COBIT, and GDPR requirements and relevant controls
•Practical experience in Cloud Security, DevSecOps, API Security, and Security Automation
•Knowledge of the main security risks and protection principles for AI/LLM-based systems, including Prompt Injection, data leakage, and securing AI agent access
•Practical experience using AI tools, or interest in automating cybersecurity processes, threat analysis, and improving the effectiveness of security checks
Conditions
No conditions stated in the vacancy.
