Assistant Vice President Information Security

Job Description

Cyber Security Operations Center (CSOC): - Manage the Security operations center and coordinate for its effective implementation - Lead a team of SOC professionals(including Vendor Resources). - Review and enhance incident detection/ identification, management processes and procedures - Ensure effective logging of all assets and monitoring, Creation of reports, dashboards and metrics - Assist and guide security teams to implement security measures, Incident Management - Represent security group during external and internal IT Security and IS audits related to Security Operations center - Work with the team to refine event correlation rules related to all assets, identify threats and vulnerabilities, ensure all events related to threats are tracked to closure - Enhance security implementation of Security Information and Event Management (SIEM) and other SOC technologies (MDR - managed detection and response). - Continually enhance and refine the Threat detection/ Hunting models, rules and logic to make the detection capabilities more efficient and effective - Review and monitor the SoC alerts/incidents dropped, Investigated & Ticketed and track them to closure. Additionally, evaluate and investigate threats received from other security tools and technologies implemented at SBI Card. - Ensure continutiy of logs by contineously monitoring, reports of various log sources - Lead the role of Incident Manager during any incidents and emergencies. Ensure that all business recovery/contingency plans and/or procedures held within the security control rooms are always kept up to date - Prepare and present reports of incidents and ways to limit reoccurrence - Act as a subject matter expert to assist the business in identifying and mitigating risks from SOC perspective - Review and action alerts recivied for Brand monitoring, Deep Dark Web Monitoring, Anti - Phsishing, and Social media monitoring - Continuosly assess the security capability of SBIC by virtue of tools and technologies implemented at SBICProject Management: - Requires experience leading both people and technology which include managing the security related projects, process improvements and delivery of various information security programs. - Develop business cases for security investments, Security risk programme and set priorities based on risk assessment. - Develop and maintain project plans and budgets. - Provide consistent two - way communication between project teams and management. Ensure alignment with senior leadership through regular milestone updates. - Interface with various business functions and project managers. - Facilitate meetings including daily stand - ups, issue resolution, and project status meetings. - Represents the relevant performance metrics to senior management- Expertise in SIEM, MDR, ADR, EDR, and Vulnerability management security platforms - Knowledge in multiple information security technologies and their strengths and shortcomings. - Proven experience with securing information for various technical solutions. - Knowledge of analytic techniques and methods. - Understand security controls from a people, process and technology perspective. - Should be familiar with standard secuirity processes and guidelines. - Should be familiar with PCI DSS, ISO 27001 security standards - Ability to interact and work with various senior stakeholders. Manage congruent relationships among different teams. - Excellent written & verbal communication & presentation skills. - Ability to lead, collaborate, challenge and influence peers. Passion for project based execution and process improvement. - Excellent Documentation, Communication, presentation, interpersonal and leadership Skills- A Bachelor s Degree or advance course in Computer Science or Information Security related areas - Post - Graduation (Preferred) - MBA or Masters in related field - Industry - standard certifications such as CISA, CISM, ISO27001 LA, CEH, CCNA, CISSP, MCP etc. as preferred. - Experience managing service providers/supplier relationships (Required) - Should have strong knowledge of risk assessments frameworks such as - NIST CSF & 800 - 53, ISO27001, SOC, PCI, GDPR, etc.- Overall Experience - 6 - 8years overall in SOC, CyberSecurity/ information security experience- Preferred Industry - BFSI, NBFC,

Keyskills :
compliance reporting finance pcidss socialmedia securityoperationscenter securityrisk iso27001 projectteams projectplans itsecurity securitytools risk ecurityinformationeventmanagement