Deputy General Manager - Cyber Security

Position Summary :

The job will require individual to possess strong written and verbal communication, administrative, infrastructure planning and risk management skills. It would entail consulting and advising the team on Cyber security & assurance and work with third parties(MSSP ,OEM & Partners) to onboard best Cyber security practices within the compliance framework.

Key Activities & Responsibilities :

• Responsible for overall Cyber security practice for -IT system and infrastructure ( On Premises Infrastructure, Cloud & Applications)
• Availability of IT services and developing a resilient infrastructure to reduce failures.
• Cyber security assurance & compliance on Data center & Cloud Operations ( Availability ,Capacity planning , Security compliance, IM / SR / PM / IR
• Ensure to implement the best practices & NIST,ISO,MITRE ATT&CK framework and methodologies are maintained, followed to ensure effective monitoring, control and support of service delivery to users.
• Managing MSSP ,OEM & partners for their service delivery , Review regularly, measuring the SLA,SLO & SLI
• Ensuring Cyber security incident response plan with their appropriate resolutions(Monitoring & Reporting ). Adhere to escalation matrix and co-ordinate in escalation mitigation. Support Projects to seamless transition from project to operation with required processes (Build to Operation)
• Have responsibility for scoping penetration testing activities to identify security weaknesses within the company,
• Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level
• Analysis of information protection technologies and processes to identify technology security weaknesses & enhance the controls
• Lead ongoing risk assessments & audit of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and
• Provide quality reports to summarise test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

Required Skills and Capabilities :

(ref : hirist.tech)