IT Security

Role & responsibilities

• Manage identification of required solutions & tools, installation, configuration, administration, and maintenance of all IT solutions for IT Data center and all locations of CPL.
• Manage End point security (EDS), SIEM, EDR/XDR, SOC and NOC activities at data center and all locations of CPL.
• Implement and manage systems w.r.t regulations like GDPR, HIPAA, SOC2, ISO, ITIL, NIST etc.,
• Implement and manage effective security policies across all servers and network devices.
• Proactive identification and mitigation of IT risks as well as responding to observations identified by third party auditors or examiners while assisting in the development of periodic reports and dashboards presenting the level of controls compliance and current IT risk posture.
• Manage IT activities, supervision, scheduling, development, and evaluation.
• Ensure smooth working & maximum uptime of Networks, Servers, various Services (like Mail, Antivirus, Backup, etc.) and Security Systems.
• Monitor and manage Disaster Recovery activities for all critical applications.
• Plan, implement and monitor networks as well as Infrastructure projects.
• Planning for new IT Infrastructure projects that improve performance and reliability of Network, Internet connectivity, data security and availability, etc.
• Administration and monitoring firewall, servers and network devices, monitoring and analyzing device/server logs for any suspicious activities.
• Effectively establish and manage all IT assets, Technical support, IT asset procurement for all locations for CPL.
• Creation and Implementation of procedures for IT operations, quality, cyber security, data protection requirements at all locations for CPL as required.
• Participate in GxP regulatory audits and support business units as required.
• Coordinate with GxP business units for GxP projects implementations.
• Analyze business issues and challenges across the organization and work with the units to resolve issues.
• Manage IT projects to ensure target dates and budget expectations are met while upholding all governance standards & company objectives.

Required Qualification:

• Graduation in computers/IT with at least 10 to 15 years functional exposure. Experience in pharma industry is preferred.
• Technology certifications like CISCO, ITIL, CISSP/CISA/CISM is preferred.

Desired Skillset:

• Hands-on knowledge on technologies related to network (active & passive) activities, security activities (network level and server level)
• Expert in network and Cyber security tools and technology
• Knowledge on regulations like GDPR, HIPAA, SOC2, ISO, ITIL, NIST etc.
• Working knowledge on systems like EDS, SIEM, EDR/XDR, IAM, SDWAN, Microsoft AD, DNS, DHCP, Segmentation, VLAN, LAN, WAN etc.,
• Working knowledge on server management and SAP setup.
• Working knowledge on administration activities related to systems like Email, O365, Sharepoint, Power-BI, Audio/Video, Collaboration tools, Pharma related scientific applications and manufacturing systems like PLC, HMI, SCADA, Data Analytics, QMS, LIMS, RPA, MES etc.,
• Knowledge on Automations and RPA technologies.
• Knowledge on pharma manufacturing and laboratory processes/systems and ability to design the technological solutions for these processes (process automations) is preferred.
• Participation experience on pharma industry regulatory audits like US-FDA, MHRA etc., is preferred
• Supporting knowledge on CSV activities is preferred.