GM – Technology Security

Role

GM – Security Operations

Job Level/ Designation

M3- GM

Function / Department

Technology Security

Location

Pune

Job Purpose

1. Evaluation, Deployment, Migration and Upgradations of Security Tools within Organization security Eco system.
2. Extend support to Security Strategic planning team during evaluation of security Tools and deployment of features in Organization security Domain.
3. Role demands creation of security policies, SLAs, KPI’s and utilization reports across deployed Tools.
4. Strong Governance with Service Partners

Key Result Areas/Accountabilities

Key Result

1. Responsible to help Security planning team and Security Operations team for evaluation of Tools and deployment of required features in Organization Security domain.
2. Responsible for creation/modification of security policies, SLAs, KPI’s and utilization reports across deployed Tools.
3. Plan, integrate and initiate active monitoring of critical technology elements in a phased manner as agreed
4. Proactively identify relevant weaknesses/vulnerabilities in tools and technologies based on advisories, notifications from OEMs, Security agencies, industry forums, news, internet, government authorities and groups.
5. Preparing a detailed statistical report for presenting to Security leadership team highlighting security posture of organization function.
6. Owns Capacity planning, Availability of Tools and products. Engagement with service partners for migrations, Critical Severities and Incidents and other BAU Projects.
7. Reviewing the solutions at design phase and provide proper guidelines so that security measures are incorporated at design phase.
8. Evaluate all new solutions and ensure that all critical risk are identified, documented, tracked, reported and mitigated on time. Ensuring that no solution goes live without security approval.
9. Responsible for development and improvement of security incident, RCA, Problem management process taking inputs from other verticals of Security.
10. Engage with external audit team, risk management team, compliance team and other cyber security teams for highlighting issues in their respective domains.
11. Responsible for Deployment, Migration, Expansion, Sunset of Tools and Products as agreed for Organization
12. Ensure adequate storing capacities for the securities logs and retrieval mechanism in shortest possible times. This is to ensure Government and other lawful agencies compliance obligation of the organization.

Core Competencies, Knowledge, Experience

Core competency

1. Strong experience in Security Tools like SIEM technologies (Arc sight, Qradar), DAM technologies (Guardian, Oracle DAM), DLP monitoring (Symantec, Websense)
2. Ability to analyze security event from enterprise security technologies such as End Point security, Firewall, IDS/IPS, DDoS solutions (Arbor), WAF, Anti APT solution etc.
3. Having Good Knowledge in IT Service Management processes.
4. Experience in project management in IT and Telecom domain for  security projects executions

KNOWLEDGE & EXPERIENCE

• Minimum 15 years of experience in Information Security
• Strong Knowledge in Perimeter and network Security tools
• Knowledge in Email and End Point Security Tools.

• Knowledge of Security standards used for Telecom Networks
• Knowledge in Data Security

Must have technical / professional qualifications

Must Have

• Graduation/ BE./ B.Tech (Computers/ Electronics & Telecommunications)
• IT Security certification – CCNA, CISSP/CISA, ITIL or similar