Human-in-the-Loop: Design workflows that ensure high-stakes AI decisions (like grant recommendations) cannot proceed without explicit, authenticated human approval.
Risk Reporting & Regulatory Coordination: Report technology risks directly to the Director, Group IT, and Board Risk& Audit. Independently assess security incidents, coordinate with regulators and relevant listed or regulated entities, and recommend appropriate risk acceptance decisions.
Conduct and support forensic investigations across systems, networks, memory, and disk, while analyzing attacker techniques, persistence mechanisms, and data exfiltration paths to uncover the full scope of incidents
Support security reviews throughout the software development lifecycle, including the review of technology designs, security requirements and application security assessments.
Design Defender for Cloud Apps connectors and policies for Microsoft 365 applications, cloud discovery, threat detection, files, sessions, and Conditional Access App Control.
Perform basic configuration changes, troubleshooting, and initial incidence assessments before escalating to a backend support team according to pre-established procedures and runbook
Performance Monitoring: Track and analyze key performance indicators (KPIs) related to security personnel and site operations. Identify areas for improvement and implement strategies to enhance service quality and efficiency.
- Act as the organisation's early warning system by continuously observing network traffic, analysing system logs, and managing Security Information and Event Management (SIEM) tools to spot suspicious activities and filter out false alarms before a potential threat escalates.