IT Security Head

Technical Skills- Penetration Testing, Vulnerability Management, Web Application Security, Network Security, Cloud Security (AWS, Azure), Security Compliance (HIPAA, PCI DSS, ISO 27001, NIST), Security Documentation, Security Tools (Qualys, Burp Suite, Nessus, Metasploit), Security Operations, Incident Response, Forensic Analysis, Risk Assessment, Security Audits

Experience:10+ years

City:Bengaluru, Noida, Pune, Mumbai, Hyderabad, Mohali, Panchkula, Chennai

Job Description:

• The candidate will have expertise in penetration testing, cloud security, compliance frameworks (HIPAA, PCI DSS), security documentation, and security tools such as Qualys, Burp Suite, and other industry-standard solutions
• Strong communication skills and the ability to document security processes effectively are essential for this role

Key Responsibilities

• Penetration Testing & Vulnerability ManagementPerform penetration testing on web applications, networks, and cloud environments to identify security vulnerabilities
• Utilize tools like Burp Suite, Qualys, Nessus, Metasploit, and other scanning tools to detect threats
• Work with development and operations teams to remediate vulnerabilities and strengthen security posture
• Cloud SecurityEnsure cloud security best practices for AWS, Azure, and other cloud platforms
• Implement security controls for cloud-hosted applications and workloads
• Conduct security assessments and recommend security enhancements
• Compliance & Regulatory SecurityEnsure compliance with HIPAA, PCI DSS, ISO 27001, NIST, and other security frameworks
• Conduct audits, risk assessments, and compliance gap analysis
• Assist in developing policies, procedures, and security documentation to meet regulatory requirements
• Security Operations & Incident ResponseMonitor security logs and alerts for threat detection and response
• Work with security teams to investigate and mitigate security incidents
• Conduct forensic analysis in the event of security breaches
• Documentation & CommunicationDevelop and maintain security policies, procedures, and technical documentation
• Create security reports and communicate findings effectively to stakeholders
• Provide security training and awareness programs for employees