Head-Infra Security & Compliance

Role Overview: You will be responsible for managing the implementation, configuration, and operations of various technologies related to infrastructure security. This includes overseeing perimeter security, endpoint & device security, identity & access management, data security & monitoring, application & cloud security, threat management & incident response, user awareness & training, and vendor & third-party risk evaluation. Additionally, you will lead the organizations cybersecurity awareness program and ensure compliance with regulatory guidelines. Key Responsibilities: - Manage the implementation, configuration, and operations of technologies such as firewalls, NIPS/NIDS, WAF, proxy solutions, SASE platform, EDR, MDM, NAC, MFA, Active Directory, SCCM, DLP, DAM, SFTP, cloud security, and behavior analytics tools. - Develop, implement, and test the Incident Response Plan, oversee SOC and SIEM integrations, handle security incidents, forensic investigations, and post-incident reviews. - Lead the organizations cybersecurity awareness program, ensure employee compliance with security policies and procedures. - Evaluate and manage third-party vendors for security compliance, lead third-party security assessments and SLA enforcement. - Ensure compliance with regulatory guidelines such as RBI cybersecurity guidelines, PCI DSS, ISO 27001, etc., and lead interactions with regulators, auditors, and third-party assessors. - Identify and evaluate new solutions to automate/streamline, improve performance, and enhance the capacity of network infrastructure. - Design security architecture for both on-prem and cloud environments, and manage incident management, threat intelligence, and SIEM operations. Qualifications Required: - Deep technical understanding of firewalls, WAF, DLP, DAM, EDR, MDM, AD, SCCM, MFA, SFTP, SASE, SWG, proxy, and NIPS/NABD. - Sound knowledge of regulatory and compliance requirements in BFSI (RBI, SEBI, IRDAI). - Strong leadership, communication, and stakeholder management skills. Note: The job description did not include any additional details about the company.,