Information Technology Security Specialist

Key Responsibilities

Cyber Security Operations & Governance

• Lead and manage enterprise cyber security operations across on-premises infrastructure, cloud platforms, applications, and end-user environments.
• Define and implement cyber security strategies, policies, standards, and operational procedures aligned with business objectives.
• Ensure adherence to security governance frameworks including NIST, ISO 27001, MITRE ATT&CK®, COBIT, ITIL, and other industry best practices
• Drive continuous improvement initiatives to enhance organizational cyber resilience and security maturity.

Security Incident Response

• Lead cyber security incident detection, analysis, containment, eradication, recovery, and post-incident review activities.
• Develop, maintain, and periodically test incident response plans, runbooks, and playbooks.
• Coordinate with business stakeholders, IT teams, MSSPs, and external partners during security incidents.
• Ensure timely reporting, escalation, and communication of security incidents according to defined escalation matrices.
• Conduct root cause analysis and implement preventive controls to reduce recurrence of security incidents.

Vulnerability Management & Security Assurance

• Own and manage enterprise vulnerability management programs across infrastructure, applications, cloud platforms, and endpoints.
• Conduct and oversee Vulnerability Assessment and Penetration Testing (VAPT) activities.
• Drive operating system, infrastructure, and application patch management programs.
• Prioritize remediation activities based on business impact and risk exposure.
• Validate security fixes and remediation effectiveness through regular assessments and reviews.
• Identify security weaknesses and recommend risk mitigation strategies.

Risk Management, Compliance & Audits

• Conduct enterprise security risk assessments and security reviews.
• Ensure compliance with regulatory, legal, and internal security requirements.
• Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
• Establish and maintain security controls to protect organizational assets and sensitive information.
• Develop security metrics, dashboards, and executive-level reporting.

Risk Management, Compliance & Audits

• Conduct enterprise security risk assessments and security reviews.
• Ensure compliance with regulatory, legal, and internal security requirements viz CERT in, CEA,PDP, ISO 27001 etc
• Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
• Establish and maintain security controls to protect organizational assets and sensitive information.
• Develop security metrics, dashboards, and executive-level reporting.

Vendor, Partner & Service Management

• Manage MSSPs, OEMs, consultants, and technology partners.
• Establish and govern security service delivery processes, SLAs, SLOs, and performance metrics.
• Conduct regular service reviews and ensure contractual compliance.

Drive partner accountability for security deliverables and operational effectiveness.

Certifications preferred:

• CISSP
• CISM

Qualification

BSC /BE with 8 +Years of experience