Information Technology Security Specialist

Key Responsibilities
Cyber Security Operations & Governance
Lead and manage enterprise cyber security operations across on-premises infrastructure, cloud platforms, applications, and end-user environments.
Define and implement cyber security strategies, policies, standards, and operational procedures aligned with business objectives.
Ensure adherence to security governance frameworks including NIST, ISO 27001, MITRE ATT&CK®, COBIT, ITIL, and other industry best practices
Drive continuous improvement initiatives to enhance organizational cyber resilience and security maturity.
Security Incident Response
Lead cyber security incident detection, analysis, containment, eradication, recovery, and post-incident review activities.
Develop, maintain, and periodically test incident response plans, runbooks, and playbooks.
Coordinate with business stakeholders, IT teams, MSSPs, and external partners during security incidents.
Ensure timely reporting, escalation, and communication of security incidents according to defined escalation matrices.
Conduct root cause analysis and implement preventive controls to reduce recurrence of security incidents.
Vulnerability Management & Security Assurance
Own and manage enterprise vulnerability management programs across infrastructure, applications, cloud platforms, and endpoints.
Conduct and oversee Vulnerability Assessment and Penetration Testing (VAPT) activities.
Drive operating system, infrastructure, and application patch management programs.
Prioritize remediation activities based on business impact and risk exposure.
Validate security fixes and remediation effectiveness through regular assessments and reviews.
Identify security weaknesses and recommend risk mitigation strategies.
Risk Management, Compliance & Audits
Conduct enterprise security risk assessments and security reviews.
Ensure compliance with regulatory, legal, and internal security requirements.
Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
Establish and maintain security controls to protect organizational assets and sensitive information.
Develop security metrics, dashboards, and executive-level reporting.
Risk Management, Compliance & Audits
Conduct enterprise security risk assessments and security reviews.
Ensure compliance with regulatory, legal, and internal security requirements viz CERT in, CEA,PDP, ISO 27001 etc
Support internal audits, external audits, customer audits, and certification activities for ISO 27001:2022.
Establish and maintain security controls to protect organizational assets and sensitive information.
Develop security metrics, dashboards, and executive-level reporting.

Vendor, Partner & Service Management
Manage MSSPs, OEMs, consultants, and technology partners.
Establish and govern security service delivery processes, SLAs, SLOs, and performance metrics.
Conduct regular service reviews and ensure contractual compliance.
Drive partner accountability for security deliverables and operational effectiveness.

Certifications preferred:
CISSP
CISM

Qualification
BSC /BE with 8 +Years of experience