Head of Cyber Security

What We Expect From You:

Leadership and Strategy:

• Develop and implement the overall security strategy for the organization.
• Build, Lead and mentor cyber security team, ensuring continuous development and improvement.
• Provide strategic direction and guidance on all security-related matters to senior management.

Security Operations:

• Oversees the day-to-day operations of the IT security and cloud security, including monitoring, incident response, and vulnerability management.
• Knowledge of SIEM, XDR, ASM, DMARC, IAM , cloud security, email security, CASB, DLP is mandatory
• Experience and knowledge of managing security operations centers (SOC). Proficiency with SIEM tools (e.g., Splunk, ArcSight, QRadar).
• Ability to configure, monitor, and analyze security events.
• Knowledge of threat hunting, threat modeling, and incident response.
• Ability to analyze threat data and implement proactive security measures.
• Cloud Security:Understanding of cloud security principles and best practices for AWS and Google Cloud. Experience with cloud security tools and services
• Manage and respond to security incidents and breaches, conducting thorough investigations and implementing corrective actions.

Risk Management:

• Identify, assess, and prioritize potential security risks and vulnerabilities. Experience with vulnerability assessment tools (e.g., Nessus, Qualys). Knowledge of patch management processes and remediation strategies.
• Develop and implement risk mitigation strategies and controls.
• Conduct regular security assessments and audits to ensure compliance with policies and standards.

Policy and Compliance:

• Develop, review, and update security policies, procedures, and guidelines.
• Ensure compliance with industry standards and regulatory requirements (e.g., ISO 27001, PCI-DSS, RBI, IRDAI and SEBI).
• Coordinate and lead internal and external audits related to IT security.

Training and Awareness:

• Promote a culture of security awareness throughout the organization.

Technology and Innovation:

• Stay current with emerging security threats, technologies, and industry trends.
• Evaluate and implement new security technologies and solutions to enhance the organization’s security posture.