Lead - Cyber Secuirty Posture Management

Responsible for maintaining and improving the posture of cybersecurity technologies and solutions through continuous assesment, reconcillation and control monitoring to measure effectiveness of technical controls . 
Collaborate with cross functional team to provide assurance and ensure compliance cyber security controls with organisation policies.   

Knowledge:

1. Should have understanding and knowledge of various security methodologies and technical security solutions such as SIEM, EDR, PAM, VA, NAC, DLP, DAM etc.
2. Should have understanding of IT infrastructure, Network and Security principles. 
3. Strong understanding of regulatory requirements, security policies, and security frameworks such as ISO 27001, NIST, CIS.
4. Should be well versed with ITIL and ITSM practices.

Skills Required:

1. Strong Team management and cross-functional coordination skills.
2. Exceptional analytical, conceptual thinking and problem-solving skills.
3. Excellent communication and stakeholder management skills.
4. Should have strong written, verbal and presentation skills. 
5. Ability to perform under pressure, influence stakeholders and reporting discipline.

Experience:

Candidate should have 6+ years of experience preferably in Banking and Technology organization

1. Will be responsible for assesing, reconciliation, monitoring and improving IFTAS Cyber Security Posture of technical controls.
2. Ensure Security Control effectiveness, exposure reduction  and compliance adherence.
3. Ensure accurate inventory reconcillation across servers, endpoints, applications, cloud workload, network devices, databases etc. to ensure all devices are reporting to secuirty tools. 
4. Validate security controls for complete coverage, reduce blind spots. Any configuration deviations or non-reporting systems are promptly corrected.
5. Define and track KRIs/KPIs for posture coverage and risk reduction. Define periodic posture assesment and provide reports.
6. Benchmark security posture against frameworks such as ISO 27001, RBI CSF etc.
7. Responsible for Cloud Security Posture Management, Vulnerability Assesment tools, Secure Config.
8. Manage Asset integration, risk prioritization and mitigation according to establish SOPs and adherence to the best practices.
9. Track and manage audit findings, posture gaps, exceptions through closure.
10. Ensure & maintain up-to-date documentation - SOPs to remove dependency on people
11. Remain current with organizations security policies, latest security advisories/threats, industry best-practices and developments in cyber security, and recommend and implement best practices and technologies to mitigate emerging threats.