AM / DM - Information Security

Role & responsibilities

• Management of VAPT (Vulnerability Assessment & Penetration Testing) by ensuring timely scheduling of the VAPT across Infra and application environment and tracking timely closure of the vulnerabilities, work with developers and the testers to reduce the IT technical risks. Report the progress to the management.
• Assess and approve software release requests. Constantly lookout for vulnerabilities in DLPL applications, systems and cloud. Perform periodic application security maturity assessment.
• Periodic security assessment and reviews of IT Applications, Technologies and Information processes (e.g., Change, Release Mgmt. etc.) and ensure timely closure of audit findings. Maintain the consolidated risk register and drive timely closure of the identified risks.
• Support successful completion of security projects, execute proof of concepts and new security control / technologies evaluation to identify relevant security controls in the business processes.
• Periodic security risk assessment of the critical vendors and the medical instruments. Collaborate with business on educating / mitigating the vendor risks.
• Manage threat intelligence platform and collaboration with special interest group on data leak identification, fake applications and breach control. Take down fake applications and repository posing to be Dr Lal PathLabs.
• Support governance of security operations center that includes (but not limited to) technologies such as SIEM / SOAR, VAPT etc. Ensure information security partners deliver the promised SLA.
• Impart Information security training and prepare relevant infosec training content and phishing simulations to generate awareness for the data protection and cyber security.
• Document and outline information security issues and risks in DLPL ecosystem as well as potential roadmap to address them. Identify and execute areas of automation. Document and maintain relevant information security SOPs, Manuals, Checklists and Repositories.
• Work with the relevant teams to ensure the value of information's security investment, mitigation of security risks and optimization of technologies.

Preferred candidate profile

Knowledge & Skills

Skills Required

Security Testing, Vapt, Information Security, Siem, Cyber Security, Ethical Hacking