Senior Analyst - IT Security

a) Title:

Lead IT Security

b) Business/Function:

IT security

c) Location:

Mumbai

d) Reports to:

Group Head IT Security

e) Summary:

We are seeking a highly skilled and detail-oriented IT Security Tool Operations Analyst to oversee the management, monitoring, and optimization of enterprise-wide security tools. This role is pivotal in maintaining the health of cybersecurity infrastructure, integrating new technologies, and supporting incident response and threat management initiatives.

Additional Information

a) Responsibilities:

• Oversee the operations and performance of security tools, ensuring stability and continuous improvement.
• Collaborate with internal teams and external partners to ensure seamless operations and high-quality service delivery.
• Lead end-to-end project phases, ensuring timely and quality deliverables to stakeholders.
• Provide technical support and resolution for operational issues and end-user queries.
• Drive automation initiatives to streamline incident resolution and enhance tool efficiency.
• Review and maintain SOPs and runbooks with accurate technical specifications.
• Address business challenges with timely and effective solutions.
• Mentor team members and actively participate in stakeholder and business meetings.
• Stay updated with the latest cybersecurity threats, trends, and technologies.
• Demonstrate hands-on expertise in tools such as EDR, AV, DLP, Encryption, CASB, PAM/PIM, DAM, and FIM.
• Possess knowledge of services, file types, extensions, Kubernetes, and CI/CD pipelines.
• Understand cloud architecture and implement security controls across cloud environments.
• Design and deploy endpoint security solutions across the enterprise.
• Navigate and support operations within a banking environment.
• Proactively identify and resolve operational issues and incidents.
• Collaborate with OEMs for product enhancements and solution requirements.
• Apply knowledge of OWASP Top Ten, WASC Threat Classifications, NIST, CIS benchmarks, and other compliance frameworks.
• Ensure adherence to cybersecurity standards including PCI-DSS, NIST, ISO 27001, and RBI Cybersecurity Framework.
• Manage SLAs and provide regular performance and compliance reports.
• Lead incident handling and management across various security platforms.
• Plan and execute disaster recovery (DR) drills and resiliency strategies.
• Monitor alerts and ensure timely incident resolution within defined SLAs.
• Administer and update security policies and conduct patching/upgrades for all security tools.

Requirements

a) Education:

Bachelor’s degree in Computer Science, Information Security, or a related field.

b) Experience:

Minimum 10 years of experience in IT Security, preferably within banking or technology sectors.

c) Certifications:

Certifications preferred CEH, CompTIA Security+, CISSP

d) Knowledge:

• Deep understanding of cybersecurity frameworks and compliance standards (e.g., PCI-DSS, NIST, ISO 27001, RBI).
• Strong grasp of IT infrastructure including networks, servers, and cloud environments.
• Proficiency in managing and maintaining security tools and threat intelligence platforms.
• Ability to generate reports on tool performance, threat detection, and compliance metrics.

e) Skills required:

1. Strong analytical and problem-solving capabilities.
2. Excellent communication and interpersonal skills.
3. Ability to work under pressure and influence stakeholders effectively.
4. Strong negotiation and conflict resolution abilities.