Job Description
Below are key responsiblities.
Security Solution design and implimentation.
- Design & develop strong, sustainable, and highely secure solution to protect the Orgnaisation asset.
- brainstoirming with EEM and vendor to prose and design the suecirty solution.
- project management through out project life cycle.
- Security operation support for implimented solution.
IT Security Operations
- Manage security solution, like NIPS, APT, Anti Virus,WAF etc.
- Responsible for high uptime for all security solution and their management
- Manage & maintain the SLAs, operation metrics & support ongoing maintenance activities
- Manages security incident, problem and change management.
- work with application and other stakeholder to enhance application security.
- Work with Infosec,Compliance,legal team to work on day to day security realted task.
Vulnerability management
- Responsible for OS, Non-OS, vulnerability managment.
- Responsible for VA/PT assessement , mitigation and managment.
- Responsible for 98% compliance with respect to Vulnerability management.
- co-ordination with all IT team/Leads to get maintanance window, pre and post sanity of weekly and monthly basis.
Auditing and compliance
- responsible to work along with Infosec team to conduct PCI-DSS, ISO 27001 etc and related internal or external auditing.
- Responsible to work on RED team and Blue team security assessment and mitigation on the finding.
- Manage compliance requirement on external & internal audit on IT vertical
- implementation for security hardening configuration on all IT devices which include compute, Network and servers.
- manage the compliance , IT security policy adherence, user access control etc.
Network & Security Project Management
- Identifying new technologies to enhance network efficacy, supporting vendor finalizations, deployment of new technologies and monitoring performance metrics
- Design & develop strong, sustainable, and high available network design
- Review network infrastructure architecture and solutions
- Deliver long term sustainable and scalable network solutions
- Take lead in implementing network security solutions to ensure the network security from internal and external users
- Provide technical design support, sizing, availability guidance for network
Network Operations Management
- Deliver high network uptime for IT Operations
- Manage & review network SLAs, operation metrics & support ongoing maintenance activities
- Manages incident, problem and change management for networking equipment
- Manage performance tuning and capacity planning activities to enhance the performance of the network resources
- Mentor and lead internal and external network management team
Vendor Management
- Maintain relationship with network and services vendor leadership to ensure effective implementation and network operations, ongoing support, and deployment of competent resources
- Responsible for coordinating and managing external network vendors for data connectivity
- Provide technical & program management expertise and oversight over vendor teams
- Monitor vendor SLAs, perform regular review with vendor management and report to SBI Card leadership
- Ensure timely renewals of vendors contracts
Risk & Compliance Management
- Oversee the implementation, and maintenance of standard operating procedures/ run book in line with SBI Card policies & standards
- Review network inventory and maintain patch compliance & vulnerability management as per defined SLA
- Manage compliance requirement on external & internal audit on network equipment
- Manage risk register & review periodic risk mitigation actions
- Manage network availability at DR/BCP locations
Measures Of Success
Security Solution design and implimentation
- All solution should be design as per best practice.
- All solution should be implimented as per agreed timeline
- Related successful KPI to measure project success
- operation stabilty in next 3 months.
IT Security Operations
- 99.9 uptime for all security tools.
- security incident management which should resolve as per agreed ITIL SLA.
- All operation KPI should be in green state
Vulnerability management
- Responsible for 98% compliance with respect to Vulnerability management.
- co-ordination with all IT team/Leads to get maintanance window, pre and post sanity of weekly and monthly basis.
Auditing and compliance
- All IT infra related finding in the auditing should be closed as per agreed timeline.
- All hardware should be on agreed OS firmware (N-2)compliance.
- All IT hardware /tools should have hardening configuration implimented.
Network & Security Project Management
- Adherence to Defined Project Timelines
Network Operation Management
- Network uptime SLA - 99.9% uptime of Network Operations
- Change Management Report Change failure should not be more than 5%
- Problem Management Report - 80% of P-1 incident RCA to be closed in 7 Working Days
Vendor Management
- Periodic review with internal & external partners
- Vendor SLA Report
- Timely renewals of vendors contracts
Risk & Compliance Management
- Monthly Risk Register
- Patch & Vulnerability Management Report
- Internal & External Audit Report
Budgeting
- Responsible to prepare budget and expense against each project or BAU activity.
Education & Technical Skills
- BE /B Tech/MCA
- Experience of 19 years in Designing,IT & Cyber Security .
- Security certification: CISM/CISSP
- Security compliance certification: CISA, PCI DSS implimenter
- Network Technology Certifications - CCIE/CCNP, CCIP
- Project managementCertifications - PMP,PRince2, ITIL
- Candidate should have 12-15 years of technical experience in Network Operations and Management
- Network Technology Certifications - CCIE/CCNP, Network Security Firewall, Proxy, VPN etc
- Experience of ISO 27001 and PCI DSS implementation
Competencies Critical For The Role
- Good experience in security design, security solution and operation.
- Good experience in network design, security solution and operation.
- Strong knowledge on security tools WAF, NIPS, DLP, NAC, SOAR, threat hunting, Mitre framework.
- Should have experience in managing contracts and dealing with external vendors / third parties
- Depth knowledge of Network Design and Operations
- Should have experience in managing contracts and dealing with external vendors / third parties
- Strong working knowledge of Network Switches, Routers, Firewalls, Load balancer, WAN Optimizer, WAF, Proxy, APT, NAC and IPS/IDS solutions
- Excellent project management skill, stakeholder management, time management.
- Excellent Communication, Interpersonal, Presentation and Leadership Skills
- Strong verbal and written communication skills with both business and technical areas
