Cyber Audit (Con/Man)

Job Title: Cyber Security

Location: Gurgaon/Noida

Job Description:

We are seeking a highly skilled Security and Data Management Specialist to join our team in Gurgaon and Noida. The ideal candidate will have extensive experience in identity governance, security management, data management, operations management, and OT security

Responsibilities:

1. Identity Governance and Administration:

• Implement and manage Identity & Access Management (IAM) solutions.
• Handle information classification, secure destruction, and data handling processes.
• Design and enforce Role-Based Access Controls (RBAC).
• Manage third-party information risk assessments and mitigation strategies.

2. Security Management:

• Oversee network security, cloud security, and operational security measures.
• Implement and manage application security protocols.
• Conduct Vulnerability Assessment and Penetration Testing (VAPT).
• Manage patch management processes and mobile device security.
• Implement cryptography safeguards and secure VoIP communications.

3. Data Management:

• Develop and implement data strategy and governance frameworks.
• Manage master data and ensure data quality across the organization.
• Conduct data quality analysis and CRUD analysis for business processes.

4. Operations Management:

• Implement logging and monitoring systems.
• Develop and manage crisis management and IT incident management protocols.
• Oversee cyber incident management and business continuity planning.
• Manage disaster recovery plans and IT asset inventory.
• Conduct data centre security assessments.

5. OT Security:

• Review and assess OT configuration and architecture.
• Conduct black box and grey box testing.
• Review network infrastructure and identify threats.
• Manage OT vulnerability, host security, and application security.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 5 years of experience in security and data management.
• Strong knowledge of IAM, RBAC, and third-party risk management.
• Experience with network, cloud, and application security.
• Proficiency in VAPT, patch management, and mobile device security.
• Knowledge of cryptography and VoIP security.
• Experience in data strategy, governance, and quality management.
• Strong understanding of logging, monitoring, and incident management.
• Experience in business continuity and disaster recovery planning.
• Knowledge of OT security, including configuration review and vulnerability management.
• Excellent analytical, problem-solving, and communication skills.
• Relevant certifications (e.g., CISSP, CISM, CISA) are preferred.

Selection Process:

Candidates should expect 2-3 rounds of personal or telephonic interviews to assess fitment and communication skills.