Assistant Manager Cyber Security App Security And Data Protection

Purpose

This position will provide security advice, tools, solutioning, etc related to various internal and external developed solutions like Sharepoint, Roshni Baji, 118, etc. The professional will be expected to participate in project planning, designing, capacity projections, hands-on implementation, complex integration work, security assessment, hardening of configurations, trouble shooting, maintaining, upgrading, and defining policy/procedure for all IT-infrastructure in use.  

Education (Mandatory)

A bachelor’s degree in Computer Science, Cyber Security, or a related technical field

Certifications like CEH, CC, CCNA shall be preferred

Years of Experience

Experience of at least 1-2 years in field of cybersecurity, out of which 1 year experience in VAPT

Functional Competencies

Area of Responsibilities

Security Assessment - 

• Security Assessment of company wide projects
• Including organizational wide changes in platforms, software, hardware, or appliance based solutions related to network and communication technologies that are implemented on infrastructure levels
• Review of design and workflow/ Ensure end to end secure workflows
• Performs vulnerability assessments, risk business impact, controls, and suggests treatment strategies
• Threats and vulnerability identification in the project/ requested change
• Ensuring all vulnerabilities/ critical findings should be patched/ fixed before going on production/ Live
• Review and approve requests for changes, Service requests, special service requests considering Governance policies

Threat Management - 

• Responsible for handling Vulnerability management & pen-testing of the entire infrastructure including but not limited to vulnerability assessment of servers, networking devices, Databases, software and configuration reviews
• Assist in security upgrades and patch installation for all low to critical Findings
• Hunt for threats from inside and outside KE
• Communicate cyber events to internal and external stakeholders
• Suggests fixation or remediation of detected vulnerabilities to maintain a high-security standard
• Perform tests and uncover network vulnerabilities with security teams
• Assists in OTVA activities
• Tools: Nipper, Metasploit, Netsparker, Nessus professional, Tenable SC and other open source tools for VAPT

Cyber Security Project Execution - 

• File Integrity Monitoring Solution
  • Deployment of the solution, integration with IT assets, Operational issues, Policy development, Use-cases formation for monitoring, Investigation of Suspicious activities and resolution or remediation of the incident. Troubleshoots issues on daily basis
• 3rd Party VAPT
  • Coordination with the vendor for the vulnerability identification in our IT assets, from outside the KE
• Cyber Secyurity Awareness
  • Monitor and identify the top human risks to our organization and the behaviors we need to change to mitigate those risks
  • Develop, manage, and implement a positive security awareness program, which focuses on changing behaviors both at work and at home. Simulate Phishing and other awareness campaigns

Stakeholder Management - 

• Lead the creation and procurement of awareness deliverables and learning content, leveraging various channels for effective delivery, measures the usage of the content and its effectiveness, and develops metrics 
• Establish a security awareness network with key stakeholders throughout the organization to understand risks and business objectives including Legal, Governance, ETS, EBS, Generation, Transmission, Distribution
• Owns and manages relationships with security education and awareness related vendors

Area of Responsibility Continued