Information Security Professional

Job Title : Information Security Professional

Location : Mumbai, MH

Experience : 3+ Years

Domain : Insurance

Key Roles & Responsibilities :

- Information Security Governance : Implement and monitor information security policies, SOPs, controls, and governance frameworks.

- Cybersecurity & Risk Management : Identify, assess, and mitigate information security and cyber risks across business and technology environments.

- Cloud & Application Security : Monitor security posture across AWS/Azure/GCP, APIs, microservices, applications, and infrastructure.

- IAM & Access Management : Manage access controls, user privileges, IAM, Zero Trust, and maker-checker/segregation-of-duties controls.

- Vulnerability & Incident Management : Track VAPT findings, vulnerabilities, security incidents, threat alerts, and remediation closure.

- Third-Party Security : Conduct TPRM and security assessments for vendors, insurers, POSPs, and technology/API partners.

- Regulatory Compliance : Ensure compliance with IRDAI Cybersecurity Guidelines, DPDP Act, and ISO 27001 requirements.

- DevSecOps & Secure SDLC : Work with Engineering/DevOps teams to embed security controls, secure coding, OWASP practices, and security testing into the SDLC.

- Security Audits & Assessments : Coordinate VAPT, internal/external audits, regulatory assessments, and closure of security observations.

- Security Monitoring & Reporting : Monitor SIEM/security alerts, maintain security MIS, track KRIs/KPIs, and report security risks and incidents to senior management.

- Security Awareness : Support cybersecurity awareness, access governance, incident response processes, and security training across the organization.

Key Skills :

Information Security, Cybersecurity, Security Governance, Cloud Security, IAM, TPRM, VAPT, Vulnerability Management, Incident Response, SIEM, DevSecOps, ISO 27001, IRDAI Compliance, DPDP, API Security.