Lead Cyber Security - CSRA

<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" align="right" width="665" style="width:499pt;background-size:initial;border:none;margin-left:6.75pt;margin-right:6.75pt;"> <tbody><tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="665" colspan="2" style="width:499pt;border:solid 1pt;padding:0cm 5.4pt 0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Reporting Structure</span></b></p> </td> </tr> <tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="665" colspan="2" style="width:499pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Reports to </span></b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Chief Manager<b> – </b>Cyber<b> </b>Security Risk Assessment and Advisory Services<b> </b></span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:19.15pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:19.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Education</span></b></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:19.15pt;"> <ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">University bachelor’s degree with specialization in the field of computer Science/IT or Engineering Graduate/PG in CS/EXTC/IT Allied branches </span></li> </ul> </td> </tr> <tr style="border-left:1px solid #000000;height:12.7pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:12.7pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Position</span></b></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:12.7pt;"> <ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Lead Cyber Security (RAAS-CSRA)</span></li> </ul> </td> </tr> <tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Experience/ Qualifications</span></b></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">A minimum experience of 5-7 years in IT Services and Security Management with 4 years in information / cyber security risk assessment or management or security risk advisory consulting experience</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">2 years of experience in SDLC project lifecycle, CI-CD pipelines, Secure Code review, VAPT, APPSEC from risk assessment perspective</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Perform Application Security Risk Assessment, Remediation Support for all Enterprise Platform as well as common platform components</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Manage team of risk assessors and guide them with technical training, inputs to provide quality risk reports</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Technical understanding of Microservices Architecture, Kubernetes platform, containers, HLDs, LLDs, COTS application structure.</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Manager change request for applications and ensure tracking and weekly reporting</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Experience in implementation /Governance /Review of security solutions like SIEM, Firewalls, IAM, DDOS, WAF, NIDS/NIPS, HBSS/EDR/HIPS, Honeypots etc.</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Detail understanding on networking, Linux and windows OS, Virtualization, Cloud security, Security Solutioning in applications. </span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Hands-on experience in implementing or assessing the ISO 27001/ISO 20000/ISO 22301/ISO 31000 or PCI – DSS, NIST Frameworks, GDPR, Data Protection & Privacy, Programs meeting the Regulatory Compliance, Data Centre and Application security Assessment would be added advantage.</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Structured IT and Application Security Project management experience in deploying security-related initiatives as well Technical Risk Management Initiatives </span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Excellent oral and written communication skills, preferred having customer or stakeholder interaction exposure</span></li> </ul> </td> </tr> <tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Industry</span></b></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">BFSI or ITES or IT Security Consulting Domain experience is desirable</span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Responsibilities</span></b></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <ul type="disc"> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Establish procedures for identification and classification of information assets. </span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Understand the existing business Critical Functionality, Operating processes, technology stacks, Architecture, Data Flows, Vendors Security, and Access management used etc. to define security requirements/risks as per regulatory compliance. </span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span style="font-size:7pt;font-family:Lato, sans-serif;letter-spacing:0.6pt;">Define project plan for mitigation and validation of risk closure in critical infrastructure in coordination with stakeholders and ensure the risk mitigation as per the defined SLA. </span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Develop information security policies, standards, processes and procedures.</span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Conduct information security risk assessment associated with various key assets of the organization.</span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Communicate and present concisely and effectively across various levels of stakeholders.</span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Advice management of critical issues that may affect the risk posture of the organizational information assets.</span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Establish positive working relationships with various teams across the organization.</span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Determine organizational information security requirements based on </span><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">industry standards and regulatory requirements (like ISO 27001, PCI-DSS, etc)</span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Generate innovative ideas for achieving the objectives.</span></li> <li class="MsoNormal" style="text-align:justify;line-height:normal;"><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Demonstrate leadership and problem-solving skills</span></li> </ul> </td> </tr> <tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-us" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-us">Preferred Certifications (At Least Two)</span></b></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">ISO 27001, ISO20000/ISO22301/ISO31000</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">PCI DSS</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">CEH/CHFI </span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-size:7pt;font-family:Lato, sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">CISA/</span><span style="font-size:7pt;font-family:Lato, sans-serif;letter-spacing:0.6pt;">CISM/CISSP/CRISC</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span style="font-size:7pt;font-family:Lato, sans-serif;letter-spacing:0.6pt;">CCNA/CCNP</span></li> <li class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span style="font-size:7pt;font-family:Lato, sans-serif;letter-spacing:0.6pt;">RHCE</span></li> </ul> </td> </tr> <tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span style="color:#000000;">Location</span></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span style="color:#000000;">Juinagar, Navi Mumbai.</span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:24.15pt;"> <td width="179" style="width:134.6pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span style="color:#000000;">Employment Type</span><b></b></p> </td> <td width="486" style="width:364.4pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;height:24.15pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><span style="color:#000000;">All positions are on fixed term contract on a full-time basis exclusively for ReBIT, initially for a period of five years, extendable by mutual consent</span></p> </td> </tr> </tbody></table>