Head-Infra Security & Compliance

Job Requirements

Roles & Responsibilities

• Technology Management
  

• Perimeter Security:
• Firewalls (Next-Gen), NIPS/NIDS (Network Intrusion Prevention/Detection)
• WAF (Web Application Firewall)
• Proxy solutions & Secure Web Gateways (SWG)
• SASE (Secure Access Service Edge) platform
• Endpoint & Device Security:
• EDR (Endpoint Detection and Response)
• MDM/AirWatch for device management
• NAC (Network Access Control)
• Identity & Access Management:
• MFA (Multi-Factor Authentication)
• Active Directory (AD)
• SCCM (System Center Configuration Manager) for endpoint control
• Data Security & Monitoring:
• DLP (Data Loss Prevention) solutions
• DAM (Database Activity Monitoring)
• SFTP (Secure File Transfer Protocol) management
• Application & Cloud Security:
• Cloud security posture management (where applicable)
• Monitoring NABD (Network Access Behavior Detection) or similar behavior analytics tools
• Threat Management & Incident Response
• Develop, implement, and test the Incident Response Plan.
• Oversee SOC (Security Operations Center) and SIEM integrations for threat detection and response.
• Handle security incidents, forensic investigations, and post-incident reviews.
• User Awareness & Training
• Lead the organization’s cybersecurity awareness program.
  

• Vendor & Third-Party Risk
• Evaluate and manage third-party vendors for security compliance.
• Lead third-party security assessments and SLA enforcement.
  

Secondary Responsibilities

• Regulatory & Audit Compliance
• Ensure compliance with RBI cybersecurity guidelines, PCI DSS, ISO 27001, etc.
• Lead interactions with regulators, auditors, and third-party assessors.
  

Required Skills & Competencies

• Deep technical understanding of firewalls, WAF, DLP, DAM, EDR, MDM, AD, SCCM, MFA, SFTP, SASE, SWG, proxy, and NIPS/NABD.
• Sound knowledge of regulatory and compliance requirements in BFSI (RBI, SEBI, IRDAI).
• Strong leadership, communication, and stakeholder management skills.
• Ability to design security architecture for both on-prem and cloud environments.
• Strong grasp of incident management, threat intelligence, and SIEM operations.
  

Key Success Metrics