Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 1K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

Nomura Holdings

Compare

3.9

based on 498 Reviews

169 Nomura Holdings Jobs

Lead Information Security Analyst

NOMURA CAPITAL (INDIA) PRIVATE LIMITED

3.9

based on 498 Reviews

4-8 years

Mumbai

1 vacancy

Lead Information Security Analyst

Nomura Holdings

posted 4d ago

Job Role Insights

Flexible timing

Key skills for the job

Software Configuration Management Automation Testing Operations VMware Analytical Chemistry IIS Administration

+ 3 more

Job Description

Job Title: Lead Information Security Analyst

Job Code: 8235

Country: IN

City: Mumbai

Skill Category: IT\Technology

Description:

Role Overview :

This position will have a dual role:

India VM Operations Manager managing two distinct groups each with a Team Lead: VM and SBC, reporting to Global Head of VM Ops in US
Policy Scanning (SBC) Engineer - focused on VMWare ESXi, AWS Prisma and Web Services SBC

As the VM Operations Manager you will oversee the two small distinct teams as well as maintain project and BAU deliverables for each team. You will report to the Global VM Head meeting with them on regular basis on daily activities and project work. The VM Team is split into two distinct groups one focused on all Vulnerability Management and the other focused on Policy Based Scanning and remediation. Each group has four members (including the lead) and is headed by one lead. Due to the small size of the teams the members in each group are cross trained and can perform duties within either group. The SBC group members all are all focused on different technologies to reduce the overhead on one resource

As the SBC Scanning Engineer you will be responsible for policy scanning across a range of environments, including ESXi, AWS, and key services such as IIS, Apache, and other web services. You will support the Vulnerability Management team in identifying configuration issues, ensuring compliance with security benchmarks, and safeguarding the Nomura s infrastructure from potential vulnerabilities.

Key Responsibilities:

Ops Manager
- Working directly for the Global VM Operations Manager out of US,
- Meeting regularly with Global Head
- Managing VM and SBC operations deliverables and BAU activities
- Ensuring support coverage
- Project and BAU Status Reporting
SBC
- Perform regular security policy scans across different environments including VMware ESXi, AWS infrastructure, and web services like IIS, Apache, etc.
- Analyze scan results, report on security gaps, and collaborate with infrastructure teams to remediate vulnerabilities.
- Maintain up-to-date knowledge of industry standards (e.g., CIS benchmarks) for virtualization, cloud, and web server environments.
- Work closely with cloud, virtualization, and application teams to ensure secure configuration practices.
- Automate scanning and reporting processes to streamline policy enforcement and improve efficiency.
- Track and report on remediation progress, providing technical support to teams as they address vulnerabilities.
- Participate in audits, compliance checks, and regulatory reporting related to environment security.
- Contribute to the continuous improvement of security scanning processes and tools.

Required Skills:

Operational and cyber security background
Small team management background
Strong communication, delegation, decision making, time management and problem solving skills
Basic knowledge of CIS benchmarks for ESXi, AWS, IIS, Apache, and other web services.
Hands-on experience with vulnerability scanning and compliance tools like Rapid7, Tenable, Qualys, or equivalent.
Understanding of cloud security principles and virtualization environments.
Familiarity with web server technologies (e.g., IIS, Apache) and best security practices for configuration.
Analytical mindset with the ability to interpret scan results and communicate recommendations.
Strong collaboration and communication skills to work with cross-functional teams.

Preferred Skills

Experience with automation and scripting (e.g., Python, Bash, PowerShell) to automate scanning tasks.
Familiarity with cloud-native security tools (e.g., AWS Inspector, GuardDuty).
Exposure to security in financial institutions or highly regulated industries.
Experience with configuration management tools like Ansible, Terraform, or similar.

This role requires a operational security mindset, a collaborative attitude, and a passion for learning. The positions offer the opportunity to grow your skills in the financial industry s vulnerability management space while contributing to the Nomura s overall security posture. If you are passionate about cybersecurity, possess strong analytical and reporting skills, and thrive in a collaborative environment, we invite you to apply for this exciting opportunity.

Employment Type: Full Time, Permanent

Read full job description

Prepare for Information Security Analyst Lead roles with real interview advice