Deputy Manager - Information Security

Job Responsibilities

• Responsible for managing cyber Security projects which are out sourced to vendors like Red team exercise, cyber security drills, implementation of ASM tools, Implementation of continuous Red Team Assessment tool, executing BAS
• Responsible for doing monitoring and continuous follow up and closure of VAPT results, SEBI CSCRF compliance status and preparation of reports to board committee
• Responsible for revamping of management of vendor on boarded for Information Security policies and procedures, conducting risk assessment and source code reviews and classification of applications based on criticality
• Implementation of automated CSCRF tool and automated testing / patch management tool
• Involve in operations improvement of Security Operations center
• Involve in implementing, conducting and developing IS audit and technical assessment exercise
• Involve in reporting compliance to SEBI and Board
• Ensure that the above mentioned projects are delivered by the vendors as per the schedule and scope and any expected delayed are flagged to management well in advance.
• Develop and publish the project status in weekly intervals

Functional Competencies required

• Good written and verbal communication skills
• Interpersonal and collaborative skills
• Must be a critical thinker with strong problem-solving skills
• In Depth Understanding of SEBI CSCRF & requirements
• In Depth Understanding of ISO 27001 Controls
• Working Knowledge of Security tools like Nessus, NMAP, Acunetix, Kali Linux

Behavioral Skills Required

• Ability to manage multiple projects under strict timelines as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• High level of personal integrity.
• Ability to communicate security and risk-related concepts to technical and

nontechnical audiences up through and including the Board of Directors