Lead Cyber Security- VAPT

<p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-size:12pt;font-family:'Times New Roman', serif;"> </span></p> <table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="614" style="width:460.45pt;background-size:initial;"> <tbody><tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border:solid #000000 1pt;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Reporting Structure</span></b></p> </td> <td width="463" style="width:347.2pt;border-top:1pt solid #000000;border-right:1pt solid #000000;border-bottom:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:36pt;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Reports to Senior Manager – VAPT</span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border-right:1pt solid #000000;border-bottom:1pt solid #000000;border-left:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Education</span></b></p> </td> <td width="463" style="width:347.2pt;border-bottom:1pt solid #000000;border-right:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">University degree in the field of computer science or IT.</span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border-right:1pt solid #000000;border-bottom:1pt solid #000000;border-left:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Experience/ Qualifications</span></b></p> </td> <td width="463" style="width:347.2pt;border-bottom:1pt solid #000000;border-right:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">5+ years of Information Security background is essential.</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">3+ years of Penetration testing, Red teaming and or vulnerability assessment experience</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Experience in evaluating the control environment through Ethical Hacking, Penetration Testing, Red Team assessments.</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Evaluation of security technologies to detect vulnerabilities</span></p> <p class="MsoNormal" style="margin-left:42pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Hands on experience in black-box, grey-box penetration testing on platforms like .Net, Java etc.</span></p> <p class="MsoNormal" style="margin-left:42pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Hands on experience on mobile testing of android and IOS</span></p> <p class="MsoNormal" style="margin-left:42pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">A high-level appreciation of Security Architecture and Infrastructure</span></p> <p class="MsoNormal" style="margin-left:42pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Should be familiar with the best practices of OWASP, SANS Institute, ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF)</span></p> <p class="MsoNormal" style="margin-left:42pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Develop a framework to test compliance of applications / systems.</span></p> <p class="MsoNormal" style="margin-left:42pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Experience in project management</span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border-right:1pt solid #000000;border-bottom:1pt solid #000000;border-left:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Industry</span></b></p> </td> <td width="463" style="width:347.2pt;border-bottom:1pt solid #000000;border-right:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Information technology</span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border-right:1pt solid #000000;border-bottom:1pt solid #000000;border-left:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Responsibilities</span></b></p> </td> <td width="463" valign="top" style="width:347.2pt;border-bottom:1pt solid #000000;border-right:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Conduct internal / third-party Ethical Hacking / Vulnerability Assessment / Penetration Testing, Red Team assessment on business-critical assets and processes.</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Liaison with external ethical hacking / penetration testing for RBI projects</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Coordinate with security intelligence framework to obtain latest threats & vulnerabilities</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Prepare security effectiveness reports for management</span></p> <ul style="margin-top:0cm;" type="disc"> <li class="MsoNormal" style="margin-top:3.75pt;margin-bottom:3.75pt;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Testing the applications / systems for compliance to RBI / ReBIT Information Security practices</span></li> <li class="MsoNormal" style="margin-top:3.75pt;margin-bottom:3.75pt;text-align:justify;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Ensure new applications are inducted into Data centre after conducting pen testing / vulnerability assessment</span></li> </ul> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Prioritizing security vulnerabilities identified in ethical hacking, penetration testing and application / system testing based on business impact and update Security operations team for mitigating them</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Follow up on closure of these gaps and escalate when necessary</span></p> <p class="MsoNormal" style="margin-left:42pt;text-align:justify;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-size:10pt;font-family:Symbol;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Deciding the most relevant and applicable metrics for measuring security effectiveness and deciding on the requisite algorithms for their quantification</span></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border-right:1pt solid #000000;border-bottom:1pt solid #000000;border-left:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Certifications (any two)</span></b></p> </td> <td width="463" valign="top" style="width:347.2pt;border-bottom:1pt solid #000000;border-right:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <ul type="disc"> <li class="MsoNormal" style="line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">CISSP</span></li> <li class="MsoNormal" style="line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">CEH / OSCP / OSCE / GPEN</span></li> </ul> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border-right:1pt solid #000000;border-bottom:1pt solid #000000;border-left:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Employment Type</span></b></p> </td> <td width="463" valign="top" style="width:347.2pt;border-bottom:1pt solid #000000;border-right:1pt solid #000000;padding:0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-left:36pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">All positions are on fixed term contract on a full-time basis exclusively for ReBIT, initially for a period of five years, extendable by mutual consent</span></p> </td> </tr> </tbody></table> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;background-size:initial;"><span style="font-size:10.5pt;font-family:Arial, sans-serif;letter-spacing:0.6pt;"> </span></p> <p class="MsoNormal"> </p>