Alshaya Looking for Lead Information Security – IT – India at India Full Time

Job no: IND2023-ITB39

Location: India

India Head Office

IT

Alshaya IT is a diverse organisation supporting corporate, warehouse and retail specific IT infrastructure and systems. We have software teams creating and developing in-house applications and product teams optimising and integrating major third party solutions. The rate of growth across divisions and geographies means we are constantly evaluating how we provide robust, scalable and business enabling infrastructure and systems in line with global benchmark standards.

Role Profile:
Responsible to ensure timely reporting of cyber incidents with accurate, meaningful, and comprehensive understanding of cyber incident through its life cycle. Develop proactive security controls to minimize any damage or impact to Alshaya information networks, information systems, data, and services. Need to provide an effective and comprehensive response that include the recovery of any affected information systems and the return to a fully functioning, secure, operational state for all services and information systems.

The Below Key Performance Areas include but are not limited to:

Effective triaging and prioritization of incoming alerts per MITRE ATT&CK framework.

Expertise with host and network-based security tools

Ensure the timely identification, response, investigation, and remediation of all security events and incidents

Thorough understanding of advanced security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.)

Develop, maintain, and enhance related IR processes and playbooks, documentation,and other supporting procedures

Expertise with network monitoring in a SOC environment

Develop and maintain program metrics, KPIs and reporting for the incident response program to drive continuous improvement

Aid in the evaluating, planning, configuration, and implementation of supporting security initiatives and solutions

Ensure security industry standards and best practices are identified and integrated into the program approach and methodologies

Expertise in Malware Analysis and Memory Forensics.

Knowledge in cloud response and containment

Ability to navigate ambiguity and develop working with Teams

Excellent written and oral communication skills

Knowledge of different types of vulnerabilities like OWASP Top 10/20.

Programming knowledge with a popular modern language utilized by above tools (i.e. Java, PHP, Python, Ruby etc.)

Life-long learner – always stay up to date with latest attack vectors, vulnerabilities, remediation and protection paradigms, etc.

Knowledge:

• Experience managing and leading security analysts in a security operation center.
• Proven results developing and implementing methods, processes, and procedures for detecting, responding, and resolving computer security incidents
• Deep understanding of present-day cyber-threats, attacker techniques and behaviors and effective methods to both detect & repel these threats for a global organization.
• Experience with supporting security technologies such as firewalls, proxies, web and email filters, application whitelisting, sandboxing, SIEM, threat intelligence, vulnerability scanning, syslog, IDS/IPS, DLP,EDR, Cloud etc.
• Strong technology experience with IT technologies including networks, endpoints, virtualization, cloud, operating systems, email, storage, databases, etc.
• Proficiency leading projects and project management experience with a focus on delivery and execution
• Highly motivated and self-directed with a passion for solving complex problems
• Must be able to prioritize based on risk, schedule and track to deadlines for self and team members

Experience:

• 3-6 years experience in Information Security Domain
• Graduation Degree/Btech
• CEH / OSCP / CHF certifications is added advantage.

Skills:

• Hands on security incident investigation with good knowledge of IR reporting.
• Hands on creating usecases related to security controls.
• Strong interpersonal, oral, and written communication skill.
• Deep understanding of Cyber security Framework.

About Us:
Alshaya Group is a dynamic family-owned enterprise which was first established in Kuwait in 1890. With a consistent record of growth and innovation, Alshaya Group is one of the world’s leading brand franchise operators, offering customers an unparalleled choice of well-loved international brands, including: Starbucks, H&M, Mothercare, Debenhams, Cos, American Eagle Outfitters, P.F. Chang’s, The Cheesecake Factory, The Body Shop, M.A.C, Victoria’s Secret, Boots, Vavavoom, Pottery Barn and KidZania.

Alshaya Group’s portfolio extends across MENA, Russia, Turkey, and Europe, with thousands of stores, cafes, restaurants and leisure destinations, as well as a growing online and digital business.

Operating in multiple sectors including Fashion, Food, Health & Beauty, Pharmacy, Home Furnishings and Leisure & Entertainment, Alshaya Group colleagues are united by a commitment to delivering great customer service and brand experiences.

Fresh, modern, and relevant, Alshaya’s constantly evolving retail portfolio reflects the choices and lifestyle of its customers. From flagship stores and restaurants in prestige malls, to local coffee shops, drive-thrus and online, Alshaya Group brings customers the brands they love in the places they want to be.

Advertised: 24 Aug 2023 India Standard Time

Application close: 23 Sep 2023 India Standard Time