Cyber Security Manager - IT

1. Cybersecurity Strategy & Governance

• Develop and implement the organizations cybersecurity strategy and roadmap.
• Define and maintain cybersecurity policies, standards and procedures.
• Conduct regular audits and ensure compliance with regulatory frameworks (ISO 27001, GDPR, NIST).

2. Threat Management & Monitoring

• Monitor security alerts, events and anomalies via SIEM, firewalls, EDR/XDR and IDS/IPS.
• Lead threat analysis, malware detection, and vulnerability assessment.
• Respond to security breaches and coordinate incident handling.

3. Risk Management

• Perform risk assessments across IT systems, networks and applications.
• Identify vulnerabilities and recommend mitigation measures.
• Ensure periodic penetration testing and external audits.

4. Security Infrastructure Management

• Manage and optimize firewalls, endpoint security, antivirus, encryption, DLP and email and security systems.
• Oversee identity and access management (IAM), privileged access and password policies.
• Ensure secure configuration of servers, cloud platforms and network devices.

5. Incident Response & Investigation

• Lead cyber incident response plans (IRP).
• Investigate security breaches and provide root-cause analysis.
• Maintain incident logs and recommend preventive actions.

6. Security Awareness & Training

• Conduct cybersecurity training and phishing simulations for employees.
• Promote cybersecurity culture and safe digital practices.
• Prepare communication materials for security updates.

7. Project Leadership & Collaboration

• Lead cybersecurity projects such as SOC setup, IAM upgrades, Zero Trust, cloud security.
• Work with IT, Digital Transformation, and Audit teams for risk assessments.
• Coordinate with external vendors, CERT-In, auditors, and consultants.

8. Compliance & Documentation

• Maintain documentation for policies, procedures, incident reports, and risk registers.
• Ensure compliance with internal audits, statutory audits, and ITGC controls.
• Manage data privacy requirements and secure access to sensitive information.