Information Security Manager

Job Title : Information Security

Location : Gurugram

This role will be responsible to execute information security projects as well as oversight & governance of security operation. This role will ensure that the security roadmap executes and security operations functions as per desired SLA.

HERE IS WHAT YOU WILL DO

• Drive successful implementation of key security projects that include (but not limited to) new age technologies such as SASE, Secure Operational Technology, Zero Trust, Endpoint Detection & Response / XDR, Cyber Threat Intelligence etc . Periodic proof of concepts of new security technologies to evaluate relevant security controls in the business processes and deliver improved cybersecurity posture.
• Overall management and governance of security operations centre that includes (but not limited to) technologies such as CASB, DLP, EDR, Data Classification, SIEM / SOAR, VAPT etc. Ensure information security partners deliver the promised SLA.
• Data pipeline mgmt for SIEM platform to ensure effective ingestion of security logs . Review use-cases, best practice configurations, Assess data leak control, periodic review of IT infrastructure that includes both onprem and cloud workloads. DLP / DC effectiveness (policy / procedure / DLP incident review).
• Periodic assessment and reviews of IT and Information security processes (e.g. Change, Incident, Patching, Backup / restore, Hardening, Vulnerability mgmt, TPRM etc) and ensure timely closure of process control gaps.
• Security review of key IT systems. AI / ML security. Effective vulnerability mgmt by ensuring timely closure of the vulnerabilities. Periodic collaboration with special interest group on data leak identification and breach control. Periodic cloud security assessment to ensure secure information exchange and data security at rest, transit and use.
• Annual IT risk assessment for the business-critical processes and technologies, maintain the consolidated risk register and drive timely closure of the identified risk. Drafting mgmt presentation outlining existing information security issues as well as potential controls to address them. Presenting infosec score card to the

Senior Management

WHAT ARE WE LOOKING IN YOU

COMPETENCIES