Senior Manager - Network & Security Operations Compliance

Job Purpose:

Oversee the Audit and Compliance activities for the Network & Security Operations within the Information Technology division of the Bank. This role requires effective collaboration with Internal Auditors, External Auditors, Regulatory Auditors, the Information Security Team, the IT Compliance Team, IT - PMO team and the Project and Support teams of the Network & Security Operations function

• Single Point of Contact (SPOC) for Audit & Compliance activities of the Network & Security Operations Function.
• Ensure timely submission of data requirements for various internal, external, and regulatory audits.
• Review auditee responses for non-conformities raised in various audits.
• Document the progress of closing non-conformities identified in audits.
• Review auditee responses and artefacts for compliance with non-conformities raised in audits.
• Ensure timely submission of auditee responses and artefacts to relevant stakeholders.
• Collaborate with the Information Security Team, IT Compliance, and Project/Support Team of the Network & Security Operations function
• Ensure timely closure of non-conformities raised in Security Assessment activities such as VAPT, Application Security Testing, and Red Team Assessment.
• Ensure compliance with PCI DSS requirements.
• Ensure timely submission of compliance to regulatory requirements such as Master Directions, Circulars, Advisories, Alerts, and Ad hoc Questionnaires.
• Ensure timely submission of regulatory requirements such as Cybersecurity KRIs, OKRs, and RBS Tranche.
• Maintain Standard Operating Procedures (SOPs) and ensure their timely update.
• Maintain an up-to-date inventory of Applications, Servers, Security, and Network Devices for the function.
• Track compliance across various domains, including Inventory Management, Patch Management, Vulnerability Management, Change Management, and Exception Management.

Qualification :-

Year of Experience :-

Location

Eligibility :

• Minimum 6 years of experience as a Cyber Security practitioner with relevant knowledge in Governance, Risk, and Compliance (GRC).
• Experience in Information Security domains such as Network Security Management, Perimeter Security Management, Identity & Access Management, Cyber Risk Management, Data Loss Prevention, and Infrastructure Security.
• Hands-on experience in managing Cybersecurity solutions, particularly in one or more of the following: Firewalls, Web Application Firewalls (WAFs), Remote Access VPNs, Micro-segmentation, Privileged Access Management, 2FA solutions, Data Loss Prevention, and File Integrity Monitoring.
• Experience in assessing and/or implementing security and risk standards, including ISO 27001, NIST CSF, PCI DSS v3.2.1/4.0, and RBI Cybersecurity Framework.
• Well-versed in cybersecurity auditing methodologies.
• Preferred cybersecurity certifications: CISA, CISM, CCNA, CCNP, Microsoft Technologies, etc.