Assistant Manager - Incident Analyst

About Us

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, colour, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What’s in it for YOU

1. SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
2. Admirable work deserves to be rewarded! We have a well curated bouquet of rewards and recognition program for the employees
3. Dynamic, Inclusive and Diverse team culture
4. Gender Neutral Policy
5. Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
6. Commitment to overall development of an employee through comprehensive learning & development framework

Role Purpose

Responsible for monitoring, reviewing, tracking, investigating and reporting of Information Security Incidents which are getting recorded or notified through various sources.

The role is also responsible for monitoring technology landscape and associated services for security flaws and incidents, analyzing reported/identified security incidents and ensure timely contentment and remediation of the same.

Role Accountability

1. Monitor and analyze the alerts generated on incident management consoles such as SIEM, DLP, Threat Intelligence etc.
2. Investigate, log, update and resolve Security Incident within the agreed timeline and as per defined process
3. Run Incident management bridge, follow escalation matrix as defined in the process document
4. Conduct Root cause analysis and prepare incident report as per the agreed format
5. Monitor InfoSec owned & managed Infrastructure for issues
6. Identify and block various IOCs with applicable security policies / configuration changes
7. Work closely with cross-functional teams within SBI Card and partner with key stakeholders to manage security issues/incidents within defined timelines
8. Maintain and publish Security incident MIS reports as per agreed process at predefined frequency
9. Perform process documentation and compliance adherence

Measures of Success

1. Timely Logging, Investigating, updating, resolving and reporting of Security Incidents
2. Timely and accurate publication of MIS / business dashboards
3. Increase in maturity incident coordination, improvement in response time by all stakeholders
4. Creation and publication of Incident report as per the prescribed format within the agreed timeframe
5. Process Adherence as per MOU

Technical Skills / Experience / Certifications

1. Knowledge of Security Operations Center (SIEM, DLP, Anti-Virus etc. alert review and tirage)
2. Knowledge of Security Incident Management
3. Knowledge of Windows & UNIX Operating system
4. Basic knowledge on ITIL procedures
5. Understanding of Security Terminology i.e. Network Security, Vulnerability, Anti-Virus, Virus/Trojans/Spam/Attack Pattern
6. Knowledge of Information security management standards like ISO 27001, CEH, CHFI
7. Strong overall ability to troubleshoot and analyze all hardware and software issues
8. Industry-standard certifications such as ISO27001 LI, CCNA or other desired security certifications as preferred.
9. One or more of the following certifications: GIAC Information Security Expert (GSE) or GIAC Certified Incident Handler (GCIH).

Competencies critical to the role

1. Stakeholder Management
2. Analytical ability
3. Process Orientation
4. Problem Solving

Qualification

Bachelor degree / B.tech in Computer Science / IT or related discipline

Preferred Industry

BFSI / NBFC /E-commerce/IT & ITES / Telecom