About Us
SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.
SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, colour, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.
Join us to shape the future of digital payment in India and unlock your full potential.
What's in it for YOU
- SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
- Admirable work deserves to be rewarded. We have a well curated bouquet of rewards and recognition program for the employees
- Dynamic, Inclusive and Diverse team culture
- Gender Neutral Policy
- Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
- Commitment to the overall development of an employee through comprehensive learning & development framework
Role Purpose
Responsible for developing and running end-to-end program for managing the security incident life-cycle of all kind of Information Security Incidents including Information Governance & Security , getting routine investigation, forensics & eDiscovery etc. done in association of in-house team and service partners.
Role Accountability
Oversee the monitoring, identification and resolution of security incidents to detect threats through analysis, investigations and prioritization of incidents based on risk exposureDevelop and manage Incident Management program including monitoring, review, triage, assessing impact, diagnostic and data collection, troubleshooting and remediation, interacting with requestors etc.Develop and maintain an incident response management program that includes incident detection, analysis, containment, eradication, recovery and chain of evidence / forensic artifacts required for additional investigationsLead the implementation and sustenance of security incident response plan and associated playbooks for all security related incidentsOversee SBIC incident response tools and processes, covering proactive planning and prevention, as well as reactive detection and remediationManage Information Security Incidents including assessment, quantification, investigation and mitigation including liaison with IT teams and other business functionRecord and classify received Incidents and undertake an immediate effort in order to restore a service / reach resolution stage as quickly as possibleReport incidents to the regulator (RBI) as per the mandateDevelop and manage metrics and reporting on the effectiveness of the security incident response program which includes reports to leadershipIdentify trends in security incident response and regulatory requirements for the necessary changes in the programWork with multiple internal and external stakeholders to drive triage, analysis, containment, and eradication of the incidents and provide leadership in high risk incidentsParticipate in various internal and external audits in context of security incident response programDrive continuous improvements in people, process, and technology as it relates to the efficiency and effectiveness of the security incident response programDefine Policy and process for Security Incident Management including defining roles and responsibilitiesDefine Cyber Crisis management plan and conduct Cyber Crisis management drills at regular intervals involving IT and business stakeholdersMonitor, respond, and report compliance to SLA's and managing security incidents related to IT systems covered under security programs like SIEM, DLP, Anti-Phishing Brand and Dark-Web Monitoring.Assess Security Incidents and lay down strategies to reduce the likelihood of future occurrencesEnsure process documentation and compliance adherenceMeasures of Success
Incident Management Program as per approved policy and regulatory requirementsTimely and accurate reporting of Incidents to regulator (RBI)Logging, responding and closure of Incidents as per agreed SLANo adverse observation in Internal / external auditsNo of improvement opportunities identified in Security Incident Management processes / proceduresIncrease in maturity of Security Incident Management operating modelEffective root cause analysis and remediation for identified security incidentsTimely and accurate publication of MIS / Business dashboardsPublication of Incident report as per the prescribed format within the agreed timeframeProcess Adherence as per MOUTechnical Skills / Experience / Certifications
In-depth knowledge of security concepts such as cyber attacks, threat vectors, best practices, risk and incident management etc.Information security experience, with a very strong technical background and significant security Incident response experienceUnderstanding of Security Terminology i.e. Network Security, Vulnerability, Anti-Virus, Virus / Trojans / Spam / Attack PatternUnderstanding of configuration and security controls of various information technology and security infrastructure components deployed on prem and cloudExperience in handling various types of incidents like phishing, denial of service, malware, and unauthorized access etc.Understanding of Security Information and Event Management (SIEM), Data Loss Prevention (DLP) and security incident response workflow management technologies.Understanding of related BFSI regulations and its relevance to security incident managementExperience with and confidence to develop and socialize security operations playbooks across infrastructure and applications teams in ITStrong understanding of security incident management lifecycle including CERT / SIRT and / or MITRE attack frameworkAt least one Industry-standard certifications such as CEH, CHFI, GIAC etc.Competencies critical to the role
Stakeholder ManagementAnalytical abilityProcess OrientationTeamwork and CollaborationProblem SolvingQualification
Bachelor degree / B.tech in Computer Science / IT or any other relevant discipline
Preferred Industry
BFSI / NBFC / E-commerce / IT & ITES / Telecom