16 NCDEX Jobs

Job Responsibilities

• Responsible for managing cyber Security projects which are out sourced to vendors like Red team exercise, cyber security drills, implementation of ASM tools, Implementation of continuous Red Team Assessment tool, executing BAS
• Responsible for doing monitoring and continuous follow up and closure of VAPT results, SEBI CSCRF compliance status and preparation of reports to board committee
• Responsible for revamping of management of vendor on boarded for Information Security policies and procedures, conducting risk assessment and source code reviews and classification of applications based on criticality
• Implementation of automated CSCRF tool and automated testing / patch management tool
• Involve in operations improvement of Security Operations center
• Involve in implementing, conducting and developing IS audit and technical assessment exercise
• Involve in reporting compliance to SEBI and Board

Key Result Areas

• Develop, implement and monitor a strategic, comprehensive enterprise information security

And Cyber security risk management program.

• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Performing Information security/Cyber security risk assessments and reporting
• Implementing an effective process for the reporting of security incident
• Complying with the latest regulations and compliance requirements
• Running Cyber security audits as per regularity requirement Reviewing and analysing data leakage detections Performing Application security assessments, Source code review and guidance on closing observations. Continuous assessment of current Information security/Cyber security practices and systems and identifying areas for improvement
• Create and manage information security /Cyber security awareness training programs for New Joiners
• Work with compliance team to ensure that security and privacy programs are in compliance with SEBI and relevant laws, regulations and policies

Behavioral Skills Required

• Ability to manage multiple projects under strict timelines as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• High level of personal integrity.
• Ability to communicate security and risk-related concepts to technical and

nontechnical audiences up through and including the Board of Directors