SOC Security Governance (Mumbai)

Our client is IT MNC part of one of the major insurance groups based out of Germany and Europe. The Group is represented in around 30 countries worldwide, with Over 40,000 people worldwide, focusing mainly on Europe and Asia. Our client offers a comprehensive range of insurances, pensions, investments and services by focusing on all cutting edge technologies majorly on Could, Digital, Robotics Automation, IoT, Voice Recognition, Big Data science, advanced mobile solutions and much more to accommodate the customers future needs around the globe thru supporting millions of internal and external customers with state of-the-art IT solutions to everyday problems & dedicated to bringing digital innovations to every aspect of the landscape of insurance.

         As per of Cyber Security Governance team member you will be closely working with the Global entity teams (IT administrators / IT Security / Information Security) and Germany teams (Cyber Security / SOC / Incident Handling / VAPT).

         Working in the complex Cyber Security environment and multinational culture

         Working on NIST Cyber Security Framework to validate the Cyber Security Maturity of Global Entities.

         Gather the evidence from global entities for Cyber Security controls, maintain, track, and regularly report the status in ERGO standard format.

         Provide the guidance and consultancy to global entities to implement the Cyber Security Control as per Information Security Policy and Guidelines.

         Understand the Security Advisory issued by the OEM and other external security agency. Which include IoC (Indicator of Compromise), IoA (Indicator of Attack), and recommended remediation actions.

         Issue the Security Advisory email to global entities with recommendation on new Vulnerability & Threats

• Support global entities on post Cyber Incident Activities, such as record lesson learn, RCA validatation, opportunity to improve the Cyber Control, etc.
  
• Understand the basic queries, complex issues, and various scenarios on cyber security. Prepare and present the conclusion a way that is appropriate for the target audience
  

         Handle the local Cyber Security Incidents with IT & Network Team

         Create the SoP / documentation as per NIST control and Information Security Policy

         Deep understanding about Cyber Security concepts and controls in enterprise

         Knowledge of industry standard and regulations, such as GDPR, PCI-DSS, HIPAA, ISO 27001, NIST Cyber Security Framework (CSF) etc.

         Solid understanding of network topology, network protocols, Cyber, Servers Security Endpoint Security, Secure Architecture, Security Technology, On-premises Architecture, and Cloud infrastructure.

         Knowledge of trouble ticketing systems / CRM

         Proficient knowledge about enterprise processes based on ITIL framework

• Familiar with the latest Cyber Security vulnerability / exploits / trends
  

         Bachelor or Master degree in the field of the Computer Science, Information Systems, or Information Technology

Job Location: Hiranandani Gardens, Powai, Mumbai

Mode: Work from Office