Cyber Security Specialist

JOB DESCRIPTION

Job Title : Manager Cyber Security Specialist
Grade : M12/M13
Department : Digital
Job Location : Bengaluru
Reports to : Vice President Digital

Overview:
Manager Cyber Security Specialist in the Digital department responsible forexecution and management of our cyber security strategy. Your responsibilities
will encompass safeguarding our systems and data against an evolving landscape
of cyber threats, as well as ensuring strict compliance with relevant regulations.
Strengthening our digital portfolio and maintaining the security and integrity of
our operations. In addition, this position will be at the forefront of driving a Zero
Trust security approach.
• Contribute to establishing and implementing the Cybersecurity roadmap,
actively shaping strategic initiatives from inception to execution.
• Implement and oversee real-time monitoring of the organization's digital
footprint, including external attack surface and online presence, to identify
unauthorized exposure of sensitive information or assets.
• Establish, implement, and continually update security policies, procedures,
and guidelines to protect sensitive data and regulatory compliance.
• Develop, maintain, and test incident response plans, leading incident
investigations, coordinating response efforts, and overseeing recovery
initiatives.
• Assess and monitor the security posture of third-party vendors, ensuring
their compliance with cybersecurity requirements.
• Select, implement, and manage security technologies and tools (e.g.,
firewalls, SIEM, IDS/IPS) to protect against threats and vulnerabilities.

Maintain thorough documentation of security policies, incident reports, risk
assessments, and security measures.
• Plan and execute security audits, compliance assessments, and penetration
testing, driving remediation efforts and ensuring adherence to standards.
• Collaborate on business continuity and disaster recovery plans, ensuring
critical systems can be restored swiftly.
• Stay up to date with emerging cybersecurity threats, technologies, and best
practices through continuous learning and professional development.
• Undertake any additional tasks as agreed upon with the supervisor, ensuring
a flexible and adaptive approach to fulfilling the organization's cybersecurity
needs.
• Any other task as assigned by formal supervisor and project work as assigned
according to special organizational needs.

1 Education Engineering (BE/BTech), MCA, BCA / from a reputed institution
• Industry recognized certification in Security Incident Handling and
Industry standard certifications in security (CISA, CISM, CISSP, Ethical
hacking, Digital Forensics, Cryptography etc.) is a plus.
• Excellent communication and collaboration skills.
2 Years of Experience and Specialized Knowledge 6-8 Years of experience
• At least 5 years of work experience in relevant Cyber security
practices in a large organization.

3 Technical Knowledge:

• • Vulnerability Assessment and Penetration Testing (VAPT): Knowledge of
  vulnerability assessments and penetration testing to identify weaknesses
  and potential exploits in systems and networks.
  • Security Frameworks and Standards: Knowledge of security standards
  such as ISO 27001, NIST Cybersecurity Framework, PCI DSS, and GDPR, and
  how to implement them effectively.
  • Web Application Security: Understanding of common web application
  vulnerabilities (e.g., XSS, SQL injection, CSRF) and techniques for securing
  web applications and APIs.
  • Risk Assessment and Management: Skills in conducting risk assessments,
  threat modeling, and developing risk management strategies to mitigate security risks effectively.
• Security Testing Tools: Proficiency in using various security testing tools
  such as Metasploit, Nmap, Wireshark, Burp Suite, and Snort for assessing
  and monitoring security posture.
  • Identity and Access Management (IAM): Knowledge of IAM concepts,
  including authentication, authorization, and access control mechanisms,
  and implementation of IAM solutions.
  • Security Awareness Training: Understanding the importance of security
  awareness training for employees, including phishing awareness, social
  engineering tactics, and password security.
  • Mobile Security: Familiarity with mobile device management (MDM),
  mobile application security, and BYOD (Bring Your Own Device) security
  policies.
  • Incident Response and Forensics: Skills in incident handling, digital
  forensics, and evidence collection to investigate security breaches,
  analyze root causes, and remediate incidents.
  • Secure Configuration Management: Understanding of secure
  configuration management practices for systems, applications, and network devices to reduce attack surface.
  4 Behavioral Skills • Strong communication skills
  • Commitment towards processes • Strong Interpersonal skills
  • Orientation towards end consumer employee & Guests
  • Team Player with a collaborative approach