Manager - Information Security And Governance

Seeking a skilled Vendor Assessment and Penetration Tester to join our Cyber Security team. The individual in this role will be responsible for evaluating the overall security posture of third-party vendors, conducting penetration tests on external systems, applications, and services, and ensuring compliance with security standards

Key Responsibilities

• Representative from Security across the organization for performing Risk Assessments for any new projects from IT / Infrastructure / Security point of view.
• Work with the AppSec team for the Vulnerability Assessment and Penetration Testing on Web Applications, APIs, Mobile Apps and Cloud Environment. Also ensure Application Source Code is scanned as per Security Best Practices.
• Work along with the Server & Application team for Vulnerability & Configuration Assessment, Firewall Rule Review and Baseline Standards review.
• Work Along with endpoint and server team for Freeware and License Softwares / applications assessment and installation.
• Collaborate with the Development Team, IT and Business Stakeholders for tracking, remediation of the open issues and bring to closure.
• Ensure adherence to Compliance Standards such as ISO 27001, NIST, OWASP, etc.
• Provide technical guidance and mentor ship to VAPT team.
• Review the Security Assessment Reports, escalate and follow up with stakeholders for mitigation.
• Understand the organization's infrastructure and perform deep dive analysis of the processes,tools & technologies and identify the associated risks.
• Document the risks and associated controls in place (risk register).
• Knowledge on Attack Surface Management, Breach Attack Simulation & Bitsight Monitoring.
• Knowledge of WAF with OWASP Top 10 vulnerabilities and Virtual Patching for reducing the Risk Exposure.
• Hands on experience on Security Tools such as Tenable Security SC, Nessus, Qualys VMDR etc.
• Assist in other BAU activities based on the feasibility.
• Manage Vendor Relationship and security assessments for third party applications.
• Stay updated with emergency cybersecurity threats, exploits and security trends to enhance the security posture.

Mandatory Skills Required

Skills Required

Cloud Security, Network Security, Web Application Firewall, Vulnerability Assessment, Penetration Testing, Web Application Security