Minapharm Pharmaceutical
January 2020 - present
Develop and implement comprehensive IT security policies and procedures aligned with organizational goals. Ensure policies address current and emerging cybersecurity threats, compliance requirements, and industry best practices. Formulate and execute risk management strategies to identify, assess, and mitigate cybersecurity risks. Ensure compliance with relevant regulations, standards, and legal requirements. Coordinate with internal and external auditors to facilitate security audits and assessments. Develop and implement incident response plans to address cybersecurity incidents promptly. Lead investigations into security breaches, coordinate with relevant stakeholders, and implement corrective actions. Provide timely and accurate incident reports to senior management. Oversee the design, implementation, and maintenance of security infrastructure, including Fortinet products (FortiGate Firewall, Forti-Analyzer, Forti-Token, Forti-SASE), Tenable Nessus for vulnerabilities assessment, and Kaspersky for end-user protection. Implement profile controls such as USB block, encryption, out-of-company web filter, and application control. Manage multi-factor authentication using RSA. Administer Fortinet production tools, including FortiGate Firewall, Forti-Analyzer, Forti-Token, and Forti-SASE. Utilize Tenable Nessus for vulnerabilities assessment. Implement end-user protection measures using Kaspersky, including USB block, encryption, web filter, and application control. Develop and implement security awareness programs for employees, enhancing a culture of cybersecurity. Conduct regular training sessions on security policies, procedures, and emerging threats using PhishRod. Evaluate and manage the attack surface with threat intelligence using SocRadar. Stay current on emerging technologies to enhance the organization's security posture. Collaborate with third-party security vendors to evaluate and implement security solutions. Manage relationships with external cybersecurity service providers and consultants. Drive continuous improvement initiatives to enhance the efficiency and effectiveness of IT security operations. Monitor industry trends and best practices to proactively adjust security strategies.