Information Security - AVP

DEPARTMENT

Information Security

REPORTING POSITION

CISO

KEY RESPONSIBILITIES

Security Engineering:

Experience in review and /or implementation of technology components like networks, Infrastructure, security solutions like DLP, AD, end point security tools, Email Security, mobile device Security, proxy, firewall etc.

Review effectiveness of IT architecture, Data and User Security Controls, Cloud Security Assessment, Cryptography Controls, and other System Security Practices.

Conduct POCs for new Security Solutions, implementation of new Security Practices / Processes / Controls across organization, work closely with security partners and MSS vendors on day to day basis, and communicate updates

Should have good knowledge of various platforms / technologies and security controls (e.g. Firewall, proxy, load balancer, database, DLP, DRM, domain controllers, System Hardening, System Security Practices, Access Controls, Secure SDLC, Application Security etc.)

Conduct Review of all projects (e.g. new applications, system integration, secure architecture, confidential data requests, risk assessment etc.)

Security Operations Center (SOC) and Threat Intel:

The role will include complete governance and oversight on SOC processes, overseeing testing

Should understand of data protection techniques like encryption, vaulting, security in transit and at rest.

Analysing Security Advisories, identifying actionable with stakeholders & tracking closure.

Track vulnerabilities in the environment for remediation within timelines and ensure timely management reporting of all information security risks.

Involvement in SOC governance, to make sure all reported incident, advisories are actioned as per recommendations, review various reports, alerts generated by SOC

Regulatory Compliance:

Should have good knowledge of Indian IT laws, global security frameworks & regulatory requirements from IRDAI, RBI, SEBI etc.

Engage in Information security strategy and governance, risk and compliance, cyber resilience, information security transformation and co-sourcing, application and network security engagements.

Ensure Team is always audit / compliance ready, and support the internal / external audits.

REQUIRED QUALIFICATION AND SKILLS

Educational Qualifications:

Graduate, Post Graduate

Work Experience:

7+ Years of relevant experience in IT and Information Security

Certifications:

CISA, CISSP, CEH, ISO27001, BCMS, any security specific certificate will be added advantage .