Day-to-Day Responsibilities
Designing zero trust architecture for applications, networks, cloud and endpoints, based on the principle that no user or device is trusted by default.
Defining identity and access policies, such as multi-factor authentication, least-privilege access and conditional access rules.
Planning network segmentation and micro-segmentation so that a breach in one area cannot spread freely across systems.
Reviewing cloud and SaaS setups and specifying the security controls they need.
Working with SOC and security operations teams to define monitoring, logging and incident response for the new design.
Preparing phased rollout plans and guiding engineering teams as they move from older perimeter-based systems.
Writing standards, reference designs and reports for CISOs and business leaders, including risk and compliance evidence.


