Asst. Manager - IT Security

Experience Level – 7+ years

CTC – 10 to 14 LP

Education : B Tech, or Any Graduate with certifications

Job Responsibilities :

· Manage the day-to-day operations related to security of IT systems, including, monitoring and maintenance

· Developing and implementing policies, regulations, and strategies to enhance the organization's security

· Evaluation and sourcing new security tools and technologies

· Managing security incidents and implementing response plans

· Ensuring compliance with internal and external policies and regulations

· Performing regular audits of business practices to identify areas for improvement

· Running risk assessments and testing data processing systems

· Advising on digital and technical aspects of cybersecurity governance

· Create and drive proactive monitoring and reporting for endpoint and system health including, patching, compliance, and other performance metrics.

· Effectively provide general information security guidance & technology support and training to business.

· Manage vulnerability remediation and incident handling

· Implement new security technologies as required to support a dynamic/challenging business environment

· Liaise with internet audit team, external auditors and regulatory bodies as necessary

· Ensuring that the organization adheres to all necessary protocols, regulations, or legal requirements

Job Requirements :

· 7+ years experience, with an IT Security focused role

· Experience executing in a cloud first technology organization

· Experience with Endpoint Security, Mobile Device Management (MDM), Email Security, Security Incident and Event Management (SIEM), Web Application Firewall (WAF), Intrusion Detection/Prevention (IDS/IPS), Vulnerability Management, Data Backup and Restoration, Data Loss Prevention (DLP),Antivirus, patch management etc.

· Working experience on Active directory, Windows Servers, Azure, AWS, GCP platforms etc.

· Proven experience within Incident Response situations and demonstrated ability to handle and maintain confidential information in a professional manner

· Must possess strong written and verbal communication skills, and be capable of understanding, documenting, communicating, and presenting technical issues in a non-technical manner to audiences with varying degrees of technical expertise

· Be a team player and enjoy collaborating on cross-functional teams

· Familiar with compliance and privacy regulations such as PCI, GDPR, CCPA,SOX, and other regulations/standards, CISSP, CCSP, or other relevant  industry security-focused certifications preferred