HDFC Sales - Information Security Officer (5-7 yrs)

We are seeking a skilled Cybersecurity Specialist with expertise in digital forensic readiness, vulnerability assessments, penetration testing, and security governance. The role requires hands-on experience in risk assessment, incident management, and compliance with security frameworks like ISO 27001 and NIST.

Roles and Responsibilities :

- Digital Forensic Readiness Assessment (DFRA) - Design and implement DFRA frameworks to proactively prepare for forensic investigations and incident handling.

- Conduct readiness assessments to identify gaps in evidence preservation, log management, and chain-of-custody protocols.

- Develop incident response plans and forensic policies aligned with ISO 27001, GDPR, and regulatory standards.

- Lead Vulnerability Assessment and Penetration Testing (VAPT) for web applications, networks, and endpoints, identifying risks and providing remediation strategies.

- Utilize tools like Nessus, Burp Suite, and Acunetix to uncover security weaknesses and collaborate with IT teams for mitigation.

- Perform configuration reviews for security solutions such as firewalls, WAF, PAM/PIM, DLP, and SIEM.

- Implement data encryption programs to safeguard organizational data.

- Conduct red teaming, VA-PT, source code reviews, and mobile app security reviews.

- Work directly with ISG teams and coordinate with stakeholders to enhance security posture.

- Perform risk assessment and risk management to mitigate security threats.

- Ensure compliance with security policies and standards across technology projects.

- Propose updates to security policies and procedures for regulatory alignment and efficiency.

- Manage incident response processes, including detection, reporting, and mitigation.

- Maintain a technical knowledge base on security threats, trends, laws, and regulations.

- Oversee security testing procedures and remediation plans for identified risks.

- Ensure audit trails, system logs, and monitoring data are reviewed for compliance.

- Manage third-party security vendors to ensure compliance with service-level agreements.

- Work on cloud security strategies for virtualized and elastic computing environments.

Skills & Qualifications Required :

- Diploma/Degree in a technology-related field.

- 5-7 years of hands-on experience in IS/IT Governance, VA-PT, and security configuration reviews.

- Strong knowledge of security frameworks like ISO/IEC 27001 and NIST.

- Expertise in risk management, security awareness training, and project management.

- Strong critical thinking and analytical skills for incident response.

- Experience with cloud security in virtualized environments.

- ISO/IEC 27001:2019 Certification (Preferred).

- Excellent written and verbal communication skills with a high level of integrity.