Security Strategy Risk Management:
Develop and implement security strategies aligned with industry standards and regulatory requirements (ISO 27001, GDPR, CERT-In, SEBI, etc.).
Conduct security risk assessments and audits to ensure compliance and mitigate potential threats.
Threat Monitoring Incident Response:
Continuously monitor IT OT environments, networks, and cloud systems for security breaches.
Lead incident response efforts, including investigation, containment, mitigation, and reporting to regulatory authorities.
Security Framework Compliance:
Design and enforce security policies, procedures, and governance frameworks across IT and OT landscapes.
Ensure adherence to cybersecurity compliance frameworks, managing security audits and third-party risk assessments.
Technology Implementation Security Controls:
Secure cloud, network, and endpoint infrastructures using SIEM, IDS/IPS, WAF, and other security tools .
Conduct ethical hacking exercises, vulnerability assessments, and penetration testing .
Collaboration Leadership:
Work with IT, DevOps, and leadership teams to embed cybersecurity best practices into business processes .
Conduct security training and awareness programs for employees and stakeholders.
Qualifications Experience: Education: Bachelor s/Master s in Cybersecurity, Computer Science, IT, or a related field.
Experience: 10+ years in cybersecurity roles, preferably with expertise in IT and OT security, enterprise security strategies, and regulatory compliance .
Certifications: CISSP, CISM, CISA, CEH, or equivalent preferred.
Technical Skills:
Expertise in cloud security (AWS, Azure, GCP) , network security, and security operations (SIEM, VAPT, IDS/IPS, WAF, DDoS mitigation) .
Strong understanding of forensics, threat intelligence, and dark web monitoring .
Experience with security audits, compliance reporting, and risk mitigation strategies .
Soft Skills:
Strong analytical and problem-solving abilities.
Excellent communication and leadership skills to work with cross-functional teams.
Ability to work independently in a high-pressure environment.
Technical Skills:
Proficiency in security tools and technologies (e.g., firewalls, intrusion detection systems, SIEM).
Strong understanding of network protocols, operating systems, and database security.
Experience with vulnerability assessment and penetration testing methodologies.
Preferred Qualifications:
Masters degree in Cybersecurity or related field.
Experience with cloud security platforms and services.
Familiarity with regulatory requirements such as GDPR, HIPAA, or PCI-DSS.