Cyber Security & IT Governance

As a Cyber Security Manager at Avaada, you will play a crucial role in managing and enhancing the cybersecurity program of the organization. Your responsibilities will include setting up and managing the Security Operations Centre (SOC), overseeing cybersecurity operations, and strategizing for security modernization. Here is a breakdown of what will be expected from you: - **Security Operations Centre (SOC) Setup & Management**: - Design, plan, and manage the SOC aligned with business requirements. - Define log sources, event flows, SIEM integration points, and threat intelligence feeds. - Develop operational playbooks, escalation workflows, shift schedules, and knowledge base documents. - Implement SOC KPIs and conduct periodic effectiveness reviews. - Coordinate with IT, network, and cloud teams for 24/7 monitoring. - Perform tuning of correlation rules, alerts, and response procedures. - Support audits by documenting SOC processes and maintaining control evidence. - **Cybersecurity Operations Management**: - Manage threat detection, incident response, vulnerability remediation, and endpoint protection. - Oversee security alerts, logs, and investigations. - Track zero-day threats, malware trends, and APT behavior. - Coordinate cyber incident triage and manage response teams. - Monitor KPIs for threat detection, incident closure, and endpoint compliance. - **Security Strategy, Roadmap & Modernization**: - Prepare and maintain Avaada's Cybersecurity Roadmap. - Identify security gaps and outdated tools for modernization. - Benchmark security posture against global trends and best practices. - Coordinate with leadership for board-level reporting and security investment planning. - Ensure alignment of the roadmap with IT initiatives and cloud-first transformation. - **Infrastructure, Cloud & Identity Security**: - Ensure secure-by-design principles for infrastructure and cloud services. - Implement and monitor identity and access controls. - Review firewall policies, VPN configurations, and segmentation zones. - Collaborate with cloud architects for cloud-native controls. - Enforce identity lifecycle management and privileged access workflows. - **OT/ICS & Plant Cybersecurity**: - Manage risk assessments for OT environments and SCADA systems. - Oversee IT/OT network segmentation and security hardening. - Implement monitoring tools for critical infrastructure events. - Plan cybersecurity drills and simulations for plant-level scenarios. - **Awareness & Cyber Hygiene**: - Conduct cybersecurity training and phishing simulations. - Track user participation, risk scores, and improvement areas. - Promote a security-first culture across the organization. - Run executive awareness sessions for top-down risk ownership. **Qualifications & Skills**: - Bachelor's/Masters degree in IT, Computer Science, or related field. - 10+ years of experience in Cyber Security with 5+ years in a leadership role. - Certifications: CISSP, CISM, CEH, CCSP. - Strong understanding of enterprise security architecture, security tools, and cloud security. - Experience in managing cybersecurity frameworks and security controls. - Excellent problem-solving, communication, and leadership skills. This role at Avaada offers you the opportunity to lead and shape the cybersecurity landscape of the organization, ensuring a robust and secure environment.,